I have received two identical emails on this topic in the last 45 minutes - thank you Rupert, I heard you the first time.
What is a major concern is they are not stating what parts of our travel/ loyalty profile were accessed. Anyone signed up to the IdentityWorks service?