Mileage points redeemed by someone else

Got an email that my miles were redeemed by someone else. Has there been a data leak or something?