Paypal sent a LEGITIMATE email refuting these identity thieves trying to hijack your personal info.

Basic rule of thumb, NOBODY asks for updated personal info by email. If they do, you did the right thing and went directly to the source without passing "Go"...