We'd never email you in that way, and we'd certainly never ask you to download any file like that. This really shouldn't need saying but you shouldn't trust any emails like that; may they claim to come from your bank or from us. Any important information would be posted on our facebook and twitter accounts, we'd never use some random .exe file thing that we email to you right after we got hacked. If you have downloaded whatever it was and installed it: do a virus scan right away get rid of whatever it was.
I didn't get an email, it just seemed to pick random people; perhaps the oldest members? Being an admin I thought that it was a cert that I'd get one, but apparently not...