People waiting for a refund may want to know this - or risk having their personal information stolen ...