Originally Posted by
angatol
AA does have a problem in that anyone knowing someone's name and flight number, could look up their record locator and ticket numbers, passport number, date of birth etc. OP: do you have a reasonably common name?
Really?! I didn't know that was possible… I thought you could look up itinerary details but not a passport number or date of birth…?
My name is quite uncommon, but that doesn't mean someone couldn't have found it on Google and given it a whirl…
Originally Posted by
_kurt
Were the details of this itinerary emailed to you after you booked it? It might be time to change your email password.
Yes, I thought about that -- but the fellow who called knew not only my name and the record locator, but also my billing address, which was new (I entered it on aa.com for the first time about 15 minutes before receiving the call). So he could not have gleaned that from my email.
The only piece of information I gave to the fellow that he did not have already was that the issuing bank was MBNA. I'm fairly sure that was not enough additional information to permit any kind of fraud, which is why I didn't mind giving out the information even though I was a bit puzzled by the source of the call.
Not sure if it makes a difference, but this was the first time I had used aa.com (as opposed to aa.co.uk) to book a ticket with "United Kingdom" selected as the country of residence, and the first time I used this card and this billing address.
It does however seem that nobody else has received a call like this, which is interesting!