I was told on the phone that "sometimes we reset passwords if it hasn't been changed for a long time"
Either a bug in their system or a hack. This is only happening with one of my ntlworld email addresses, no other passwords have been compromised as far I know.