FlyerTalk Forums - View Single Post - Account fraud / breach: my account compromised, awards taken, etc.
Old Jul 19, 2023 | 5:30 am
  #594  
anabolism
10 Countries Visited
20 Countries Visited
30 Countries Visited
20 Years on Site
 
Join Date: Aug 2004
Programs: AA (EP), Hilton (Diamond), Marriott Bonvoy (Titanium)
Posts: 9,143
Originally Posted by greenmustard
Tried to login via the AA app (was automatically logged out) and the AA website today and see a login error telling me to call customer service. Advantage Customer Service isn't open until Monday morning, and any AA number I call (Platinum Pro line, General reservations) automatically redirects me to the Customer Service line; I'm guessing it's because they have my phone number on file, and there's some sort of my flag on my number now? I was hoping someone on the phone could confirm if my account was locked/hacked at the very least...
  1. I assume I shouldn't really try to book any new flights or use AA shopping until I get this resolved, since I'll likely be issued a new number?
  2. Also anyone with experience know how long it'll take once I have a new account fo have my miles and status transferred over? I don't have any current flights booked but ideally need to be booking flights this week for upcoming travel for the beginning of next month, and some of these bookings may be award flights, use of a flight credit, and possible use of a SWU.
  3. I didn't receive any emails about my email being changed, spam emails in general, or any miles being used, but I assume there was a breach because I do have a bad compromised password that I had been meaning to change...AA's website had warned me before, and yes I know I'm dumb for not heeding it immediately. Is this login error the standard for a breach, or should I be worried that I somehow broke something in their T&C and my account has been locked due to that? This is me probably being paranoid, but the lack of any indication that I was hacked has me worried? I don't think there's anything that I've done that would warrant corp sec looking at my account (don't churn ccs, not using miles for others, not skiplagging, etc), unless standing by/SDC for later flights or cancelling flights for flight credit to rebook is somehow not above board.
  1. You can earn miles in your old account, they will be transferred to the new account once that's set up.
  2. The new account should be set up the same day you call. I don't know if AA security is able to transfer your SWUs to it, or if they need to get AAdvantage customer Service to do it, but either way it should be quick.
  3. You should have received email when the miles were redeemed or if your email was changed. If those emails weren't sent, that points to a problem in AA's systems. As for your concerns about AA's security group targeting you, I think in cases like this they do want to try and determine that you were hacked as opposed to you selling your miles and then claiming to be hacked. Usually a police report is all they need.
anabolism is offline