I've had the same today but a Skoda Octavia - luckily no mileage added.
Like you, I changed my password immediately. On with the chat team now to try to find out why/how, but it is unnerving.
Thanks for raising this!
