Just received the following:
While the original sent to me did have the name, FC id & mileage included, indicating that it was genuine, it appears that some - like this apology, only had "Dear Member".
A clear suggestion that it could be a phishing email.
There has been some considerable upset caused in some quarters until there was confirmation that VS had made a mistake.
Unfortunately this may attract phishing emails in the future.
I believe that VS, like the banks, should state that any email without your name included should be treated as suspicious and links to login to your account should NOT be followed.
It does seem that a 6 hour+ response time to this is excessive. v(