I am not sure why any compensation is due? You got your points back and it's not like every Marriott account is breached.
In all probability, your email could have been breached too and the scammer simply deleted the email that was related to the booking.
OR
Maybe your Password was too easy?
OR
Maybe you shared or wrote it down somewhere?
There are endless possibilities and I don't think Marriott should be responsible for such one off issues which could be due to any reason