I have several google/gmail accounts for various purposes. This morning I woke up to the following message from google saying the recovery email address had changed. Here is the email

The thing is, neither VNS娱乐城876502.com注册送88元,网上最火爆的游戏平台,超好赢钱游戏 nor g*****[email protected] are email addresses that I have ever used before. Why would I receive a notice about an email recovery account I do not own having the backup email changed?

Here is a screenshot

From all appearances it looks like the email is actually from google.

Then at 12:01 AM last night I get the following email telling me someone is trying to login to an actual email account I do own. Luckily I use randomized passwords plus MFA for everything that allows 2 factor auth. Any time someone tries to login to any of my google accounts from any computer that I have never logged into before will kick off the MFA request.

Review blocked sign-in attempt You received this message because r*****[email protected] is listed as the recovery email for e*****[email protected]. If e*****[email protected] is not your Google Account, click here to disconnect from that account and stop receiving emails. Hi John, Google just blocked someone from signing into your Google Account e*****[email protected] from an app that may put your account at risk. Less secure app Sunday, October 23, 2016 12:01 AM (Pacific Daylight Time) California, USA* Don't recognize this activity? If you didn't recently receive an error while trying to access a Google service, like Gmail, from a non-Google application, someone may have your password.

SECURE YOUR ACCOUNT

Are you the one who tried signing in? Google will continue to block sign-in attempts from the app you're using because it has known security problems or is out of date. You can continue to use this app by allowing access to less secure apps, but this may leave your account vulnerable.

Best, The Google Accounts team

I have already went ahead and changed my password for the account in question, but I was wondering if there was any further action I should take to secure my gmail account past what I am already doing?