Wife just received email confirming in office appointment she did not make

My wife just received an email from SSA.gov confirming an in office appointment on August 8th. The headers on the email appear to be legit and from SSA.gov servers.

She did NOT make an appointment with SSA and has had no contact with them other than thru the website in years.

Is it even possible for someone to be using her email address on their SSA account? Seems like they wouldn't allow multiple accounts to have the same email but it's the only thing I can think of.

Should I be worried about this?