Zingoy account got hacked

Yesterday, at 2.54 am ,i received a text message saying that cashback successfully redeemed and gift card sent to friend.
I was awake and logged in to my zingoy account ,which i have been using from a long time .
I dont know how it happend,but someone from Russia stole my cashback in the form of giftcard .
I know its a small amount ,just Rs250
But ,now im scared that what other passwords are compromised
Also, in the evening i recieved an otp from mobikwik to login to the new browser,which some one did
I changed all my passwords .
Be careful about your passwords.
I dont want anyone of you to lose your hard earned money
@ZingoySupport

EDIT:

The funny thing is ,zingoy alerted me ,NOW
After 48 hours
With this mail

Dear Zingoy User,

We take security very seriously at Zingoy and we work hard to ensure that our users data and accounts are always safe and secure.

We detected that there was a unsuccessful Login attempt in last 48 hours in your account from Russia (different than your usual login location).

If you did not attempt to login, We strongly recommend you to change your Zingoy password by using the “Forgot Password” link

https://www.zingoy.com/forgot_pa...rd

We have also temporarily blocked your wallet for security reasons. We will unblock your wallet after 72 hours.

Here are some useful tips to ensure your accounts on any website is always safe:

1) Strongly recommend you to change your email password on periodic basis.
2) Ensure you never share your password with anyone.
3) Always enter password on Safe and Secure Websites only (Websites with Green pad-lock)
4) Always use Capital letters and/or special characters to strengthen your password.
5) Avoid using same password across different sites.
6) Never share OTP received on mobile or email with anyone for any website.
Safe browsing!
Team Zingoy