Is this legit? It says it came from a google.com email, I'm pretty sure it's no longer possible to forge the sender of an email.
If I read it correctly somebody would have had to send a request to Google and convince them to hand things over (say, with some legal documentation).
Edit: on second thought, I don't know how Google handles their own domain-as-sender