A couple of days ago someone hacked into my Thank You rewards Citibank acount and emptied $2000 of points.They bought gift cards at Best Buy with the points. I found out about it because I got a security message from Citibank in my email stating my password and email address had been changed. I immediately called Citibank and was on hold for an hour and a half watching my account being stolen. The hour and half wait was weird. I am probably not the only person who got hacked, maybe that was why I was on hold for a long time.
Better passwords are a must in current times...this site will help you choose...gives “cracking times” for given passwords:
https://www.grc.com/haystack.htm
(His “SpinRite” product is also very good).