My complaint to Marriott was answered with a canned response that missed the point. It consisted of 2 sections that appeared to have been copied and pasted together.
a) Fraudsters are pretending to be Marriott mostly in Canada and Australia; don't get scammed. [In my case I do not believe this was a Marriott impersonator.]
b) Marriott shares personal information with various Marriott related entities but does not sell it to unaffiliated third parties. [No surprise here, since Marriott Vacations is affiliated with Marriott.]
So in other words, nothing. By the way a survey followed the email by a few hours and I gave them all 1's...