The reason they gave is that my number was duplicated by someone on the SPG side. Screenshot of email is below. Looks real and after clicking you end up at marriott.com. No personal info was ever asked.
Again, I delayed several hours after receiving this email and then suddenly my account was not there. Couldn't log in. Couldn't change password. When I try to change password, it says my identifying info (name, email, zipcode) is invalid.
So frustrating. Planning trips for rest of year and want to make sure I get best prices on awards in places where points needed are going up.