Originally Posted by hailstorm

The user's name and account information is indeed embedded in the URL in clear text that can easily be changed. But I thought it best to use the link from a respectable travel blog as is instead of hacking the URL and possibly being accused of getting the offer in a fraudulent manner. Especially since the offer itself was not limited to any group of people according to the terms.

I am already a Diamond, so I can afford to be patient while Hyatt figures out what they want to do next.