HostelWorld booking cancelled - is this a scam?

I booked a property a few days ago through Hostelworld and paid the deposit, but today I received an email from cloudbeds.com (which looks like a legit booking website?), saying that I need to verify my booking, asks for CC details so I closed the website straight away.

I then went to check my booking on the Hostelworld app, and somehow the booking is actually cancelled? It says "You cancelled this booking on 8 September 2026", but I definitely didn't do this.

I went and changed my Hostelworld password to be safe, but I'm wondering if this is a legit thing that some hostels do?