What I want to know is why the OP thinks the whole Subway points network has been hacked and not just his own?
Surely its like having your FB account account hacked and then going on a forum telling the world that they all need to change their passwords?
Or is there more info to this story that the Op isnt saying?