Well, prove to Accor that they were fraudulently taken and make them return them.
They will.
Accor will then demand refund to cancel payment to hotel. So the hotel will then lose out, as they should, as they allowed the identity fraud to occur.
As to you, you end up the victim of identity fraud, but other than that too have lost nothing.
No need for you to do anything in Thailand at all.
It’s pretty much the exact same process as if someone had used your credit card details and placed a transaction on your account that you then dispute…
It states what happens for “less than 90 days”, and what happens for “more than 90 days”, but leaves what happens for “exactly 90 days” overstay as being unspecified.