It's the Merkle IWGs and also rewards sites like JMPC (Chase) rewards and AARP rewards and others that are affected. . It's curious neither Merkle or any of the affected companies are making any public comment. I found comments on Reddit that said there was a ransomware attack on Merkle last weekend, that it was "big" and that the FBI was involved. I have no idea how true that comment was but it is again curious that that Reddit comment was deleted the next day. Merkle has an FB page. Some people were commenting asking what happened. No answer was given and then Merkle made those posts unreadable and limited commenting on all their other posts, meaning no one can post to them.