Attempted hack on my account.

So guys and girls. I received an email about two hours ago with the 6 digits to confirm my password change and seeing as it wasn't me requesting to change the password,I am obviously recieving attempts on my account. Quick question? This would mean that they have my email but not my password right? Presumably if they got into my account I wouldn't be getting that message right? I have all forms of authentication set-up so presumably they wouldn't be able to do much if they got in before I could stop it. I am mostly using cold storage apart from a tiny percent of ALTs that aren't supported ,so I have that security also. Should I change passwords or keep them as they are if they haven't got in? I was mostly concerned they had my email password as why else would they request to change password,tho I don't use it for anything else so I am also hoping that's not possible. Am I safe or should I change some things? What's the public opinion? PS:I won't click on any links or accept any advice at all from any of you nice folks who hit up my inbox with solutions to problems I don't have and offer me your apps or phishing site links.