This has been happening with AAdvantage and HHonors as well, and probably others. One commonality that has been discussed from those in the know relates to people using easy passwords and/or using the same passwords for multiple websites, both big no-nos today.