Just found out it also happens on my account - and the site refuses to take new password set up.

Update - finally made the site took new password. BUT, despite the claim of security need to force change password, there is NO email coming to inform me the password is changed - just how secured that can be? Virtually all sites once password is changed, the email in profile will receive a notice. Nada from Marriott site. So much for the security need to force the change of password.

Why the site randomly picks customers to force a reset of password? This has happened to me twice this year and once last year. It has not happened to my husband's account even once...

So annoying.