I think AA has done what it could do in this instance. Maybe as a settlement/negotiation with the thief or his company
they could ask for them to make the OP good ! I think the company employing the thief could settle this for OP not
going to social media etc. (maybe too late already for that) This is only a goodwill gesture, I feel and AA is not obligated in
any way to compensate OP for his careless action...