Just got this text - I do have an old Binance account that I've not used in forever, but have never brought anything directly from Ledger. So someone's given away my personal info, and I'd surmise it has to be Binance.