They absolutely do send emails like this. They’ve got a monitoring service if you have a credit card with them to check for data breaches, and most credit cards and even banks I’ve seen do the same. I just got my monthly monitoring update email this morning from Discover, thankfully telling me they didn’t find anything.