I own "mydomain.com" (actually something else!) and have a catchall to receive all emails sent to any firstname.lastname@example.org Earlier this week I received an email from email@example.com asking me to verify firstname.lastname@example.org. This person is unknown to me. I did not verify.
I have now received this email:
Dear Anne Pearson,
The password for your Apple ID email@example.com has been successfully reset.
If you believe you have received this email in error, or that an unauthorized person has accessed your account, please go to iforgot.apple.com to reset your password immediately. Then review and update your security settings at appleid.apple.com
Has this person succesfully greated an Apple ID account with an email address she doesn't own?
If so, what can I do?