My points are intact at the moment fortunately but I had a similar experience with an account I used a couple times to Western Union money to a friend. Odd thing is that I hadn't logged into that account in probably at least a year when it happened. There was also, more recently, a ticket processing company, walletini, that I used for a concert in Boston that had their user data compromised, so it is possible that this could be the result of a more sophisticated operation. Highly recommend changing passwords on any account in which the same one is used.