Originally Posted by
Duckle
Twitter account has my surname so they would have everything they need.
I get your point with bag tags but at the same time no one is doing that. Everyone's waiting for their bag to leave and it wouldn't be a reasonable measure for AA to need to limit that. Sharing on twitter with 1.6m followers of which many are bots is vastly different. On AA website you can see passport info, contact info, address in the US a bunch of other things, and if you were to call and make changes they would use the card on file. So I would argue it's a serious breach
I have to ask then why you would be communicating with AA about your itinerary in a public thread instead of DM. I think you bear some responsibility here as well. The Twitter agents are probably more used to dealing with individual matters like this in a DM.
I'm also surprised your real last name is in your Twitter handle, but to each his own I guess.