I don't have any signs suggesting that my email or phone is compromised. I know that I have not shared this reservation info with anybody - and accessed it in web browsers on my own computers, and in AF app.
Booked via AF website a month ago, last leg flown a few days ago.
I'll try to contact AF tomorrow - what is the best channel to contact them with something like this?