Avios hacked
Our Avios account was hacked and two rooms for 3 nights in Spain were booked, with my name as lead traveller and two Russian sounding names booked alongside. We called BA which froze our account and cancelled the booking, and called the hotel and actually spoke a minute with the person since the front desk agent thought we wanted to speak with Dimitri and Olga as well as the local police (good thing we speak Spanish). We doubt they'd do anything about it but it was an interesting experience.
Anyway, any idea how this happened? I did have fraud on my BA card a week ago, just a $50 charge at Starbucks. Cancelled the card and got a new one but how did they do a booking with avios without me getting an email? How do they check in without the lead traveller?
Also any experience getting avios refunded? Customer service wasn't able to say they could refund it.