Warning - Potential Security Breach

I am getting the warning "The server's host key does not match the one WinSCP has in cache...." that occurred while I had an open session. The indication is that the host changed the SHA-256 key while my session was open. I am concerned that this is a MitM attempt, but I am not sure. I don't want to update my key unless it is legitimately a host key change.