It's best not to reply to any unsolicited message you receive, especially if it's the first time you're hearing of your personal data being compromised in a data breach.