By the way, thanks for the password!
Did anything look out of the ordinary? Did you recognize the senders address? Was it similar but not the same as an offical email?
Information Technology <it@cfi.org>
If you ever think that an email is suspicous it is better to err on the side of caution. Forward it to security@cfi.org as an attachment