The funny thing is the main reason our accounts are being hacked is to make some point reservations.
So it is obvious who did it
Unless it's a Santa making random reservations for random people, there is always a name attached to those stolen point bookings...
My account was hacked last week, but as I'm in the middle of several stays, they just changed my PIN. Usually they close the account (what I was told).
Until the next time I guess... At least the hacker didn't cancel my reservations, just made a new one for him using my points. I'm unable to see it unfortunately.