Hi guys, my girlfriend and I are travelling through Southeast Asia currently. While applying for a digital arrival card for Malaysia, we accidentally used a third-party website and paid 50 USD for it (it should be free). We've frozen our bank accounts that we used for the payment, but we're really unsure what to do. This website now has both of our passport details that we entered. We sorted it out with the banks and managed to get new cards, but we're more worried about our passport information being out there. Any help would be really appreciated.