Well, what exactly did the person do? If someone signed into your account and booked a ticket for himself with your miles, then that should definitely be reported. You have nothing to hide. If you did some shady deal with the person that backfired on you, that's another story. It's hard to offer good suggestions without knowing the full details of the story.