A loyalty-account incident shows how credential stuffing can turn a consumer login into a privacy problem and a stored-value problem at the same time.