If you recently placed an order, check your email.
Good on them for coming clean so quick.
lol they're probably just the ones who actually make good faith efforts to notify people.
Though sending a spreadsheet of names to a phishing email is truly fucking stupid beyond belief.