I logged in today to book a few nights. At the confirmation screen my email had been changed. Looking further my phone number had been changed as well. No points were taken or room certificates.
Called the rewards center and had my info changed back. Was asked to add a pin to increase the security.