Yeah the best thing you can do is report it and delete the message, do not respond to it.
Maybe someone already mentioned it here? Received a PM from a spammer? Let us know! - #70 by kobolt
And if you really think someone got into your account you did the right thing too by changing things.