Originally Posted by
jimthehorsegod
For bonus points, those insane enough to use the same username here as with HH are disproportinately more likely to be daft enough to use the same password either betwee FT/HH or anywhere else on the internet and HH.
Anyone who gets one of my passwords would also need my HH number, which nobody should be able to find without physically stealing my HH card or my laptop.
Originally Posted by
ubrahme
The problem is also in part contributed by Hilton - when they mail the Monthly Statement balance - The emails clearly show Full Poin Balance (which is OK) - but they also show the FULL Account Number
... Except Hilton does this, which does provide another avenue.
That link requires username or HH number, which they won't have from an email/password list. Unless "access to your e-mail account" means access to old emails that include your number, I don't see a way in. I have never liked the implications of cloud storage, so continue to auto-download all of my email. If someone got into my email account, they wouldn't get to see messages more than 10 mins old. I guess they could keep spying on my emails for a month until a HH email comes in, but they probably don't have the patience.