I just got off the phone with Bonvoy. I was checking my account this AM to see if my stay from the 4th had posted yet. There was a 100K point transfer out of my account!!! I called and yesterday someone called claiming to be me and transferred it to their own account!! They had the guys name, so they will investigate. They did return my points, and I have added some safety steps to my account and changed my password. But everyone might take a quick look at their points activity!!!