Yep, *should* be refunded, as it is when a ticket goes unused. And obviously *could* be, given sufficient access to the database. But clearly the first line of customer defence doesn't have a button to click. Probably not worth going on the attack any further. Might try an email - if I can find an address to try.