I'm not suggesting it's phishing, nor arguing the case for not sending the details requested- just the method in doing so struck me as a bit irresponsible. I guess I was just surprised given other airlines I've made claims with have provided secure forms or methods to reply not via direct email.