Maybe you should intentionally hit "Reply To All" and warn everyone else that got this email that the whole thing is a scam.
A legitimate company would never send a group email like that -- everyone would get an individual message that doesn't reveal other subscribers' email addresses. This is obviously a scam, no question. It's just another phishing attempt.
The obvious red flags:
* Sending out a group email that reveals a bunch of other subscribers' email addresses.
* An email asking for your account information.
* Using a free public e-mail service instead of a company-owned domain name.
The only typical phishing red flag they missed is the typical atrocious spelling.
It's a scam, pure and simple.