What are the specific details in the breach notice google is sending you? Also, out of curiosity what membership plugin are you using? If you could send over a link to the site so I could take a quick look at the front-end & urls, that's be helpful as well.
-Eddie