I just received notification via email and on my phone about an attempt to access my gmail account from England.
From what I can see of the email it looks legit, there is nothing obvious about it being a phishing email and given I got a notification on my phone as well you would think it was legit.
It's time I changed my password anyway, so I logged in to gmail from a fresh browser, changed the password, received another to say my password had been changed successfully and moved on.
I'm now however getting notifications on my phone (galaxy nexus) that I cant log in and 'action is required'. But I can still log fire up any Google app with no problems.
Should I be worried ?