Woke up this morning to a “your room is ready” message for a Marriott in London. I live in Seattle and definitely wasn’t traveling.
After some digging, it turns out the room was booked via Booking.com, prepaid, not with any of my cards, but in my name and with my Bonvoy number attached. I’ve stayed at this exact hotel before, about 18 months ago.
I don’t use third party sites for personal bookings, and my old company confirmed this wasn’t a corporate booking either. I called the Titanium line and Marriott has opened an internal ticket, but no one can explain why my Bonvoy number was used.
Has anyone seen this happen before? Is this some kind of account misuse, data leak, or weird points farming attempt? I’m honestly baffled about the motivation here.
0