Not directly related to refund - though I'm still waiting, 35 days after requesting it online - but I also had the recent confirmation that my booking details had been compromised in the data breach. As my flight was one way from Italy, it's not surprising that I've started having phishing emails from scammers masquerading as Italian banks wanting me to 'confirm' my details. As all they include is my email address (they should know my name too but don't use it), these are easy to spot - but confusing as I'm also awaiting refunds from Trenitalia and a ferry company.