I'm so sorry. There was a rash of this kind of thing last year with Hilton Honors. Hackers exploited a flaw in a mechanism to link to Amazon accounts and used a back door to drain Honors balances -- I got a late-night email confirming I'd redeemed 650k points to Amazon. Panic. Hilton eventually made me whole, but had to issue me a new Honors number and didn't seem to have any way to roll back the fraudulent access. I hope things come out OK for you.