I recently had a fraudster somehow used my hotel rewards account to book a room at a hotel without me knowing. Thankfully, I had some TFA settings set up where I caught the attempt in progress. But the fraudster was still some how able to book a hotel room. I've been able to change my password for that particular site, but I think it would be a nice feature to report this to the larger community.
