@Nv89 wrote: ... my xfinity email (which I never use) ...
If you don't check your Comcast email it's a good idea to forward it to an address you do check. Once in a long while they send out stuff that's actually important. In webmail ("...connect.xfinity.com..."), you can set this up under under (gear icon) / Settings / Mail / Auto Forward.
... Has anyone else had this problem?
A number of forum posters have reported receiving emails like this in recent weeks. If an employee doesn't reply to your message here, Comcast Security Assurance should be able to help. You can reach them at 1-888-565-4329 (from https://internetsecurity.xfinity.com/help/report-abuse/). Note that this is NOT one of the general customer service numbers.
The first-line reps there are sometimes not very helpful, so you may need to be persistent and keep at them until you get a satisfactory response.