Two ways to think here. One is, these were real messages from Apple. The other is they were not.
Did you log in by clicking on links in the email? If you did, there is risk you may have logged into fake sites.
Scams (e-mail, text messages, and phone calls) are getting very good at closely imitating true Apple communications. Always be cautious. Here are some guidelines:
Identifying legitimate emails from the iTunes Store - http://support.apple.com/HT201679 - lacking in specifics, the next link is better:
Recognize and avoid phishing messages, phony support calls, and other scams - https://support.apple.com/HT204759
- Apple e-mails address you by your real name, not something like "Dear Customer", "Dear Client", or an e-mail address*.
- Apple e-mails originate from @apple.com or @itunes.com but it is possible to spoof a sender address. "Apple email related to your Apple ID account always comes from appleid@id.apple.com." - https://support.apple.com/HT201356
- Set your email to display Show Headers or Show Original to view Received From. Apple emails originate from IP addresses starting with "17.".
- Mouse-over links to see if they direct to real Apple web sites. Do not click on them as this just tells the spammer they have a working e-mail address in their database.
- Phishing emails may include account suspension or similar threats in order to panic you into clicking on a link without thinking. They may report a fake purchase in order to infuriate you into rashly clicking on a false link to report a problem. Mar 2018 post by Niel https://discussions.apple.com/message/33129140#message33129140 - "Emails saying that your Apple ID has been locked or disabled are always phishing. If one actually gets disabled, its owner will be told when they try logging into it instead of through email."
Click on this link "If you think your Apple ID has been compromised" --> https://support.apple.com/HT204145
'Checklist: If you want to see if anyone else has access to your device or accounts' click here --> https://support.apple.com/HT212021
Security and your Apple ID - https://support.apple.com/HT201303
Contact Apple for help with Apple ID account security - https://support.apple.com/HT204169 "This article provides country-specific Apple Support contact information for customers seeking help with their Apple ID password or other security-related issues." Better for directly reporting an issue.
For a real two factor request:
Get a verification code and sign in with two-factor authentication - Apple Supporthttps://support.apple.com/HT204974
