VegasGambler

I tried to log into my AA account and it says that for my security, my account had been locked.

I changed my password and unlocked it with no problem. I didn't have any previous failed login attempts, so I don't think that anything that I did caused the lock.

All my miles and trips seem to be there. There were no unexpected charges (pending or otherwise) on my linked CC. My trip credit was intact. So I don't think anyone accessed my account.

Does this just randomly happen sometimes? Should I be concerned?

VSLover

this happened to me last month. quite strange as i was regularly accessing my account.

PHL

My account was hacked and someone changed some of my profile info.. I got an email about it and was able to get back in and change the password. Nothing was amiss, but had I not picked up on the account info change, I guess someone might have redeemed a trip with my points. Not much more they can do other than maliciously cancel or alter existing trips.

socalterp

Mine was locked yesterday and had to go through the password change process.

then got an email from aa that said that there was a breach, and that my account had been accessed. They think for the purposes of �stealing� miles, but there was no activity. Also would have had access to information that was stored in the account like address, phone, passport, etc.

VegasGambler

I didn't get an email from them (until I changed my password). I don't think anyone accessed my account but I can't be sure.

And, I just got an email from them saying that they think someone got access to my account. It's interesting that the email came 12+ hr after my account was locked.

jljones78

Happened to me a few months ago and there was a minor news story about it. That time there was a data breach at an unnamed partner that impacted a few thousand accounts. As best as I could tell there was no activity on my account.

David10225

Also received the unauthorized access.email today. Very strange as I can't imagine how it happened. AA claims in their email that they have no evidence that the credentials were obtained from an AA system. I changed password...not using the link in the email...nothing appears amiss. I dont keep my passwords in any 3rd party application.

VegasGambler

I'm glad it's not just me. It does seem strange. It could be a glitch in their system (they could be wrong about someone accessing it) or it could be a fairly small hacking attack.

rickscholz

A few months ago, I had my account locked... they actually required me to create a whole new frequent flyer account... they walked me through the process over the phone (took about 30 minutes)... taking the steps of making sure I used a DIFFERENT email address, a DIFFERENT password, and a DIFFERENT security questions. Then they had to transfer all of my miles and status to the new account, adjust my credit card, etc. Quite a hassle.

BrianVRDC

The same thing happened to me in early July while I was out of town. They required me to use a new email, new security questions, etc. Since then I've had my account locked twice and had to create new passwords, but thankfully I didn't have to go through the entire new account process again.

VegasGambler

Just to close the loop on this, I noticed today that a $600+ trip credit that I had was not showing up in my account. I called in and the agent said that as part of the security procedures when they lock your account, they invalidate the trip credit and when you want to use it you have to call in and they will ask security questions and re-validate it. So my credit is still there but it does not show up in my account.

So just a PSA; if your account was locked and you are not sure if you had credits, you may want to look through your old email (searching for "trip credit" worked well for me) and see if you had any unused ones. You will need the number from the email (it looks like a ticket number but the first few digits after the "001" are apparently different for tickets vs other documents) when you call in. And of course the expiration date remains the same. The only real downside is that since it doesn't show up in your account it may be easier to forget about it.

VegasGambler

This just happened to me AGAIN. This is really strange; there's no way that my brand new password which I changed less than 2 weeks ago was compromised. I'm wondering if AA's systems are detecting legitimate activity as fraudulent.

Has this happened to anyone else?

kklems

Not locked but after signing in for months on multiple device, browsers, times a day etc I was asked to enter a verification code form my email. Haven't seen that before.

VegasGambler

That's probably a good thing.

They actually sent me an email that my account was compromised and someone got access. I suspect that it's mistaking one of my logins as fraudulent. There is just no way that this happened twice in 2 weeks. My password was changed and if someone had access to something at a higher level (hacked my phone, got access to my gmail, etc) they could do a lot better than 500k AA miles and a $200 trip credit.

socalterp

are you using a password manager?