I just want to point out (for those of you who don’t have a backup and are trying to clean it up manually) that by me the header.php file and theme directory in wp-options table were also changed.
Found the email in Woocommerce -> Settings -> Emails.
However, the email seems to only work for return requests and not for order cancellations. I would like customers to receive a notification when requesting a cancellation too…