Visit eBay immediately. Sign in and update your account with a new username and password.
Notify eBay of this email (they have information on their site of where to send the actual email so they can investigate).
In the future, NEVER respond to any such email message from ANY organization to which you belong without first visiting the site.
I did not. But I thought the approach was a new one.