Yes, this was a spam message.
We do not know how many members got messages like this. Yesterday we had a massive account creation attack and the new accounts were apparently configured to send PMs (personal messages) to our members. Cat_7 happened to witness the event while it was going on and he could stop the registration flood and delete the newly created accounts with the PMs they sent. That left only the email messages pointing to the removed PMs.