If the tweet with the locator has been deleted, and given the relatively limited amount of PII that a fraudster would be able to access from an AA record locator, I don’t think you need to worry.

But as to whether or not AA owes you compensation, typically you’ll need evidence of actual damages in order to prevail, not just “what if someone does x.”