No, it's not the first I've ever received from TFL. There were thread notifications, the announcements that TFL was closing/reopening. I seem to remember that they had "
[email protected]" as the address.
I've had problems with my address being grabbed off forums before, so I wanted to be sure it was legitimate. If it had been something malicious it's better to notify you all so that steps may be taken to mitigate damage.