I got an email from Bank of America, is this real?

It does sound like scam. I just changed my user id and sitekey information for Bank of America but I was prompted to do so when I was logging in on their home page. So if the bank needs you to change your information they prompt you when you are accessing an account. Ignore any emails, no matter how urgent they sound. When in doubt, you can always call their 800 number.