The accounts are presumably hacked - accounts with order history will accumulate point that you can use to redeem for pizzas.

Legally, yes it's a crime - realistically, the chances of anything happening? Small unless you piss someone off.