One other thing:
This email with 100% certainty arrived at the NEW email address I entered on the claims page.
So if this is NOT a valid MtGox E-Mail to warn me of a malicious password recovery attempt by a third party, but someone else's mail, then the NEW email / email database must have gotten out somehow, which in turn would have other implications.
The mail I supplied is solely in use for MtGox.
--------
See now that's highly important information that should have been included in the original post.