As I see it, Hyatt doesn't really have any choice but to respond very robustly to this issue, as that's the only way to make members and hotels alike think twice before trying something similar in the future.
The whole thing basically sounds like a massive fraud to me, particularly from the hotel side.