Bitrefill confirms Lazarus hacker group breached systems, exposing 18,500 purchase records. Company covers losses and restores operations.