Mine was locked yesterday and had to go through the password change process.

then got an email from aa that said that there was a breach, and that my account had been accessed. They think for the purposes of “stealing” miles, but there was no activity. Also would have had access to information that was stored in the account like address, phone, passport, etc.