This is a phishing attack, I received the same email. If you hover over the link, it actually goes to bronto.com, not moz.com as the link text would have you believe.
It looks like bronto.com got hacked, not moz.
It looks like bronto.com got hacked, not moz.
But it is weird to use a marketing company to send out password reset instructions.
It's weird to not disable link tracking (the automatically added redirects through the marketing company's domain), it's not weird to use an e-mail company to send e-mails. Managing per-ISP/mailer throttles/quotas, IP blacklists, spam report responses and relationships in general is a full-time job for several people.
If you have tens of thousand to millions of customers, you do not send mail from your own servers if you want it to actually arrive in inboxes.
In this case, record the ultimate destination of the link in an isolated browser session (to prevent a possible CSRF attack), then make your judgement from there.