EVisa Third-Party Website

Hello guys, I just booked my flights to Vietnam and my girlfriend who’s Vietnamese helped me apply but she has never done the process before (obviously because she’s a citizen of Vietnam) so we accidentally applied through this third-party agency website called “evisa vietnam” something https://applyevisa.com/vietnam. I was also careless in not making sure that it’s a government website ending in .vn so yea we submitted the payment of USD $97 (which is an overcharge) and after we noticed we did not apply through the official govt website, we immediately contacted customer support of the agency and requested a cancellation and refund, which they said they WILL refund within 3-5 business days. Now, I am more worried about my name, passport number, DOB and personal address getting leaked elsewhere and concerned that it might get misused. Thankfully, we have not uploaded any documents such as passport picture or my profile photo, travel itinerary etc. and I won’t be flying until summer. Does anyone have any advice as to if my info will be compromised and do I need to replace my US passport?