kindly

I received an email saying that I have bought something from store X. I did not buy it of course.

I have contacted company X about the potential fraud (they have not got back to me yet). I also asked for the password to be resent from X even though I did not make the account. I know, but probably shouldn't know, where they are sending the item.

It's getting sent to some dodgy looking unit in the US. I am from the UK by the way.

Should I do anything more about this?

Was it wrong for me to get access to the account on X?

Are there any good resources where you can find clear information about dealing with such issues?

I hope this appropriate here, I could not think of a community that would be as well informed.

PS I have checked my email account to see if anyone has logged in that was not me(they hadn't). I changed my password anyway. The security on X was bad so you did not need to confirm email.