If you received an email claiming to be from Coinbase - always be careful to check that the URL in your browser shows https://coinbase.com
A phishing attack email went out recently (subject line “Recent updates and transactions”) asking users to sign in. The link in the email takes you to a page not on https://coinbase.com in an attempt to collect your username and password.
If you believe you accidentally typed your email and password into this site, you should reset it on Coinbase as soon as you can.
If you have two-factor authentication enabled, your account will not be affected (but you may still want to reset your password if you typed it into the phishing site).
Feel free to reach out to support if you have any questions.