I realize this is quite a bit of speculation on my part, but I can't help thinking that it might be possible that a malicious actor reached out to Carolina2Cali's concierge, pretending to be them, and trying to change the account information to steal the WoH account to steal the points or certs.

I know that cybercrime is on the rise, and hotel loyalty programs have been targeted...