My CC account has been compromised as well. Someone used 52k of my points to order two Toys R Us gift cards worth $75. My email address had been changed to an unknown one.
The order date for the gift cards was today's and I tried calling their loyalty program but their offices are closed until Monday. I immediately sent them an email in the hope that they will be able to stop the fraudulent order. Changed the profile back to my email address and changed my password. Very upsetting.
Please keep an eye on your accounts.