Account Takeover victims can now — finally — apply to be reimbursed