Apparently, it's fake according to this: http://i.imgur.com/LW44c.png. But it wouldn't hurt to change your password anyway.
As mentioned earlier, Valve are very open about this, and it puts faith in them that they are. I believe that Gabe actually responds to all the emails he gets, rather than...