sadly, its incredibly easy to make an email appear as if its coming from someone when it isn't. Highly doubt this has anything to do with Coinbase
The correlation odds on this one though are obvious I think, or I wouldn't have made a thread about it. Remember, the email was made to look like it was from my email provider, not Coinbase. It said my account had been confirmed for deactivation and to click a link to prevent that from occurring.
Plus based on how Coinbase users have been getting hacked and their accounts drained I've been reading in the media online for the past couple months, this fits the MO.
If I didn't have a proper 2FA setup from the get-go, I would half be expecting a call from my cell carrier saying that my number is being ported.
Seriously.