It seems as Starwood is also trying to be proactive, having sent the following email to their members:

Some account-security best practices that Starwood recommends include:
1. Using different log-in credentials on spg.com than you use on other websites.
2. Checking your account often and looking for emails that notify you about account changes.
3. Changing your password regularly.
4. Promptly reporting any suspicious activity to SPG at (888) 625-4988
My Thoughts
If you've noticed your account has missing points, immediately contact Starwood at the number above, as they've already been working with other members in re-depositing Starpoints. In the meantime, it's always a good idea to closely monitor all of your loyalty accounts. One service I recommend is AwardWallet, which can keep track of many hotel, airline, and credit card program balances in one place. Another good recommendation is to use different passwords for each of your accounts.
If anyone has had their SPG accounts hacked and are missing points, feel free to comment below on what happened, and if you were able to recover your Starpoints.
[card card-name='Starwood Preferred Guest® Credit Card from American Express' card-id='22034416' type='javascript' bullet-id='1']










