Background
My colleague and I are both PhD students (My colleague started about 8 months after me) from the same research group (and share the same PhD supervisor) in a UK university. We were collaborating on a research project with a Prof. 'X' from another university in the EU.
Early on in the project (March 2017), over a phone call, Prof 'X' requested my colleague to provide them with a 1-page project summary to support a small grant application. My colleague and I worked on this at my colleagues work desk for a single afternoon (about 2 hours) to produce this document. Both of us thought out aloud, iterated the words & phrases a few times to write and polish this document. Since we were working on the colleague's computer, after writing we just opened the email client on that machine and sent the 1-page doc as an email attachment to Prof 'X'.
The document itself contains only 5 paragraphs of pure text. It does not contain any title/authorship or any other information whatsoever (such as header/footer). My colleague signed the email as "Best Regards, A & B". where "A" is me and "B" is my colleague. Later on, the colleague forwarded the same email (with the attachment) to our common PhD supervisor (as an FYI).
As we proceeded further into the project, the involvement of my colleague and mine became intricately interwoven. It soon very became hard for our common PhD supervisor to separate out individual contributions. There was a huge authorship dispute of the resulting paper (manuscript) which lasted 8 months but eventually got resolved, nevertheless leaving my colleague and me in not good terms.
Since this project was important to our respective PhD theses, it became crucial to clearly identify who contributed what. As part of this forensic examination, both of us gave our evidences to our common PhD supervisor, who apportioned the contributions suitably on a high-level basis. It was decided that both our theses shall have a suitably detailed "attribution of content" section for this relevant chapter, and the contents of the scientific reporting shall be minutely scrutinised by our common supervisor to prevent any allegations in the future.
Present Situation
I recently passed my PhD viva. Examiners were happy and the outcome was to submit minor corrections in 90 days time which were to be checked and approved by them. However, just before leaving for Christmas holidays, my PhD supervisor ran my submitted version of thesis in turnitin (against all relevant docs for this project) and found that I had large chunks of text (2 lightly modified paragraphs) copied verbatim from the email attachment. Our PhD advisor then inquired with my colleague about this, who insisted that the document was entirely written by him albeit with intellectual inputs from me . Therefore, our PhD supervisor asked me to re-write these 2 paragraphs and said they had no choice but to inform the internal examiner about this.
I am really worried. I copied and modified the 2 paragraphs because I thought I was entitled to reuse these words from that email attachment. Did I do something egregious? Am I in deep trouble? I am happy to re-write these 2 paragraphs from scratch, but I cannot afford to lose a degree I worked for 4 years for something little like this. What are my options if I am accused of plagiarism?