I check all my emails for these things now but just in case others are not as paranoid, I wanted to post about this to share.
The email looked like it was from AppleID and had all of the font and styling that you expect from Apple, but when you viewed the source it quickly became obvious that it was a Phish attempt.
From: "=?utf-8?Q?AppIelD?=" <redacted> To: "redacted" <redacted> Date: Mon, 23 Oct 2017 16:13:16 +0200 Disposition-Notification-To: <redacted> Return-Receipt-To: <redacted> Subject: =?utf-8?Q?=5BStatement=20Update=20Report=5D:=20For=20?= =?utf-8?Q?your=20protection,=20your=20Apple=20ID=20is=20aut?= =?utf-8?Q?omatically=20disabled=2E?=
The unicode characters and the font choices hide a lot and in my email client it looked like
From: AppleID To: "redacted" Subject: [Statement Update Report]: For your protection, your Apple ID is automatically disabled.
Apple Phishing Email