Went to book a flight yesterday and saw that someone had used my points to buy a ticket for a flight today on a completely different airline somehow. They even changed my email and phone number on my Mileage Plan account.
I managed to cancel the flight, fix my info, and reset my password. Luckily, my points were refunded right away. Still pretty scary though.