@Bronwyn I pretty much ignore password reset emails completely, unless I specifically requested them. I don't change my password in response to them, even later. Getting those emails when I didn't request them means that someone *hasn't* gotten into my account. (I have 20 character random passwords managed by a password manager though.)
The one thing I do if I get a spate of reset emails, I verify that I can get into my account. If I can't then I was actually hacked. But changing my password in response doesn't make my account more secure.