A woman from Kincardine, Ontario, Mandy Campbell, experienced a shocking theft of her PC Optimum points, which took her nearly a year to accumulate. In late July, Campbell discovered that thieves had stolen hundreds of thousands of her points using the barcode from the PC Optimum app.

According to Campbell, her app showed that the points were redeemed at a Shoppers Drug Mart in Oakville, Ontario, involving transactions worth over $1,000. She emphasized that she was nowhere near Oakville at the time of the fraudulent redemption, which is approximately a three-hour drive from her home. This alarming discovery led her to immediately report the incident to Loblaw, the parent company of PC Optimum.

Despite Campbell's prompt reporting of the fraud, she expressed frustration over Loblaw's slow investigation and the delay in the return of her stolen points. “I’m like that’s insane, I clearly proved this was fraud so I don’t understand why it’s taking this long," she commented. Concerned about the time it might take to resolve the issue, she feared it would involve months of calls and emails.

However, after a news outlet reached out to Loblaw on her behalf, Campbell received a prompt resolution, and her points were restored to her account within hours. While relieved to get her points back, she remained anxious about the method of the theft. Campbell suspected it might be linked to a data breach announced by Loblaw in March, where a criminal third party accessed a non-critical part of its IT network, putting basic customer contact information at risk.

Campbell articulated her concerns regarding the breach, stating, “Well there you go. That’s all you need for any hacker to reset your passwords and get into whatever they want.” In response to her concerns, a spokesperson for Loblaw clarified that the incident was not related to the previously reported data breach. They confirmed that the unauthorized points redemption was traced back to unauthorized access to Campbell’s personal email account instead.

The spokesperson assured that the data breach had not compromised critical information such as passwords, health data, or payment card details, and also mentioned that the PC Financial systems were not impacted by the breach.

Following this experience, Campbell has taken extra precautions to secure her account, adjustments she wishes she had made earlier. She noted that the PC Optimum app allows users to change settings to lock the redemption option until they’re physically present in the store. “So I would urge anyone to make sure that your redemption is toggled off in settings until you’re at the cash register and ready to redeem them yourself because it’s honestly not worth the hassle,” Campbell advised.

Additionally, she filed a police report regarding the theft, as it involved more than $1,000, and the police are currently conducting an investigation into the matter. As incidents of digital theft become increasingly common, Campbell's experience raises awareness about online security and the necessity for proactive measures to safeguard personal accounts.