Team:
I'm continuing to pursue this with Club Express. One possibility is that someone's login credentials were compromised.
I'm investigating implementing 2-factor authentication (that requires you to get a code from text message) so that even if someone has your login credentials, they couldn't easily get in. I know that makes logging in a bit more of a hassle. I'll keep you posted.
Please note again that while this "breech" is significant, it does not include any of your most sensitive information (i.e. credit cards and/or SSN #'s).
I'll keep you posted. In the meantime, just ignore these emails!
Mark