The recent breach I posted about has name, email, logins and in some cases passwords for a vast number of people so the ability to personalise the emails to you is quite simple.
http://www.talkmorgan.com/ubbthreads.php/topics/489107/Latest_personal_information_br#Post489107 You can look to see what sites have released your data into the wild by using the pwned site.
https://haveibeenpwned.com/ If you register your email with this site then further breaches should result in an email to advise you if you are effected.
Don't think a word/excel/powerpoint is a safe attachment as these can execute applications which can download other things. Your anti-virus package should catch these. If you are using a Mac it is even less likely to cause a glitch, bit not impossible. As always close the email. Search for the text using google to see if it is a known scam. Update your virus software and run a scan.
