Loblaws is advising PC Plus users to beef up their passwords.
The warning comes after some PC Plus users had points stolen from their accounts.
After investigation, it was determined these thefts were the results of users having weak username & password combinations used across multiple sites. These combinations were stolen as the result of the hacking of other sites (eg Yahoo & LinkedIn), and used to access the PC Plus account.
Loblaws is urging all PC Plus members to update their passwords and to change them frequently.
*UPDATE Feb 21st* Loblaws has sent out a mass email to ALL PC Plus Members with notice that ALL user passwords have been reset. Click the link in your email, or visit the PC Plus website by February 26th to update your password. Even users who have recently updated their passwords have been reset, as a precautionary measure.