Yes, it is directly from Apple. And when I reset my password I recieve the same exact email. It is very strange because maybe 3 weeks ago I received a text message saying someone tried hacking into my Apple ID and for me to respond with the password for security- obviously I didn't do that because it was sketchy. So I really hope no one hacks into my personal information.
Also, I'm pretty sure I haven't updated my phone recently and I just noticed an app that I had never downloaded. It says At&t protection plan and when you open it it makes you enter your number. Of course I have not dome this because I am suspicious of it. When I went on the app store all the reviews are just from yesterday and today. do you happen to know if this app is real?