Because of the measures taken to provide safety to our clients, your password has been changed. You can find your new password in the attached document.
Sneaky little scammers, right? Whatever you do, don't download the attachment! This one could fool you because the email is coming from firstname.lastname@example.org, but trust me, it's not from the Facebook team. Facebook will never send you an email with an attachment or ask you to reset your password anywhere off of the site. Pass the warning around to your friends, and if you do end up getting hacked, head to the Facebook help page to see what to do next.