My wife's Rewards APP has been hacked twice in the last couple of weeks. Once on the 9th November, where she lost £50, with the transaction taking place in Clapham Junction (140 miles away). ASDA helpline were very accommodating and reimbursed the sum taken. They also ran through changing the password on the APP.
2nd occasion was this last Friday, 18th November. Lost £60 this time, with transaction taking place in Stockport (150 miles away). We actually had an ASDA grocery delivery on the day but did not notice the funds missing until later in the weekend. This time the customer services team were not helpful at all, suggesting that my wife had not changed the password on both the APP and her online shopping account on the previous occasion. She had only been told to change the APP password, which she had done at the time. Their comment was that this led to the accounts being "insecure", so this was a problem of her own making. They even asked if she changed her email password as well, which I find absolutely ridiculous, as the email has 2-factor password sign in, so she would have known when someone tried to access her emails.
My brother-in-law had the same issue a few weeks back, with all his funds going missing.
I am beginning to wonder whether their online systems are secure at all, or whether there is a "mole" dishing out shopper's details from within the organisation.
Not very happy about this, and that's putting it politely. Have emailled a strong worded email to their customer services and copied in the CEO (whose email address is on their complaints website), to later read on the internet that he has actually left.
We wait with bated breath for a response.