The email goes to the email address on file and you need to know the current password before you can change it to a new one. At the bottom of the email there is this:

For reference, this request was made from:

IP address:

Web resources like the American Registry for Internet Numbers are available to find IP address owners.

It lists the IP address of the computer that requested the email and you can then use the link above and put the actual numbers that show in the email to tell you the organization name that requested it. Most of the time, the email is sent because someone was trying to remember their user name but entered the wrong user name.