I wasn't sure where to put this but hopefully one of you guys can help.

I received an email a week or so ago claiming to be from Battle.net informing me that my password had recently been changed. Since I haven't played WoW in over 6 months you can understand that this struck me as odd.

Not entirely trusting the email I refrained from clicking any links and instead navigated to Battle.net and tried to log in. No luck ("Incorrect username or password") Bugger, maybe the email was legit.

I filled out the form to recover my account and nothing happened. The next day I did it again, this time I got an email from Battle.net saying that account recovery proceedings were underway and that I should expect a new password via email.

It has now been 5 days since then without further contact from them. Malwarebytes and MSSE failed to detect anything on my machine and I haven;t logged in to WoW for a long time, nor do I use the same username/password combo for anything else.

Can somebody shed some light on my situation? I'm not worried about my WoW account but if somebody gained control of my email or banking... well that would screw me over.

Edit: So it seems the original email was legitimate (thanks clamb) meaning I have no idea how my password was acquired, the reset link email got lost in spam folder (thanks Kayedon) and expired but I submitted a new change form and it's all good now. Account is back under my control with a ridiculously complex password.

Account reports as 'FROZEN' which I assume means that Blizzard are working through the compromised account recovery process.

Thanks everyone who replied, everything here was helpful. (I'm actually shocked, nobody trolled me...)