Thank you for the prompt reply and I think you are right!
I dont have any sign up, only login page. Just above the login page there is a short message showing my email address to contact me and I think someone must have just used that email address to create forgot password link. That’s clever! I have changed the Email address and it’s not connected to any account now.
Thank you so much! When this happened, in a split section, I saw so many variations, trying to work on all possible outcomes.
Two factor authentication is on from the start.
Well it was a false alarm, which I am glad to say and bottom of my heart, I would like to appreciate the amazing platform Discourse have made. I am very happy to use it!! 