I just got the email 30 minutes ago and Googled it, and lo! It took me here.

Mine was from purchasing 1,000 Marriott points to keep my Marriot points from expiring. No idea how they managed to get LH on the email, and yes, the email contains my Marriott number, not my M&M number.

Bonvoyed again.

I used to know someone who worked in Marriott IT (lots of people in the greater DC area work at Marriott, obviously), and I'm only sorry we've lost touch, as I'd love to ask him who heads up their IT shop. Clearly they don't employ enough testers, assuming they employ testers at all.