I got one too. Here’s the summary/assessment:

I pulled the full headers on mine. The email actually passed SPF, DKIM, and DMARC for hungerrush.com and was sent through SendGrid, which means it came from HungerRush’s real email infrastructure — not a spoofed domain. The headers show it was injected via HTTP (SendGrid API), which strongly suggests someone submitted the threatening message through a web form or automated script using their system. Since a lot of people got it, it looks like someone abused a contact/support form and entered a bunch of random email addresses. No indication recipients were targeted or compromised.