I've had similar earlier this year.
in April I got an email from BA saying avios had been used to redeem for 6 adults, gocity passes in Dubai.
It was a long (11 week) process with BA and took chasing over and over to get resolved. Appalling treatment of customers due to their own IT failings.