Be careful Barry that's old hackers trick. They contact you by phone email whatever and tell you you've been hacked and should change your password, they then use various methods like asking you to click on a link for instance that sends you to a fake site where you put in a new password and you are screwed.My energy supplier contacted me yesterday to say their customer accounts had been hacked and the hackers now have my name, date of birth, address and email address. I don’t remember giving the energy company my DoB and why would they need it?
I may need to punish the director for this.
I would guess you've already given your supplier a phone call to check if it's all legit.