I just received another one today, after receiving two in the last 3 weeks (both went to trash). I use a totally separate email address for Roblox since in the past I constantly got fake login notifications. I still get them to my old email as well, but I instantly know they’re fake because that address is no longer associated with my account.
But I’m now getting them to my Roblox-only account. I have never used it to do anything but for Roblox. I’ve never signed up with it anywhere, never gave out the address, etc. I have absolutely no clue how they managed to find that email, because it shouldn’t be in any breaches, and tie it to a specific Roblox account.
I had no suspicious activity on my login sessions, and I also have 2FA. I’m just concerned how they found this email address.
Edit: Well reading other replies it looks like there was some sort of data breach. I haven’t been part of RDC either.