Been a while since I checked my UA account. Lost around 60K miles on a hotel booking in Dubai (which basically emptied this nearly orphan account). The booking was for a next-day hotel reward, so I would have had to be pretty quick to catch it.

Hackers had changed my profile email address from (something like)

[email protected]

to (something like)

[email protected]

so I never got an email.

I'm sure this will be a lengthy and painful resolution process...