I got a warning email from my credit card company saying to watch out for emails from other people asking for info like that. Its been on the radio like crazy around here today to not reply to anything asking for personal info. Some big company (can't remember who) got their server "hijacked" and all of their customers names and emails were taken. So all of those people are at risk for getting spam and what not.
Its amazing what can happen to your identity so quick. Makes me worried to even use my debit card anymore.