Ignoring a real breach notification invites risk, but falling for a bogus one could be even worse. Stop reacting on autopilot.