American Airlines, Inc.
- Aliases / services
- American Airlines / AAdvantage / アメリカン航空 / American Airlines, Inc.
- Official website
- https://www.aa.com/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
AAdvantage online accounts
- Response status
- Not listed
- Response information checked
- 2026-10-30
Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30
Around December 30, 2014, credentials obtained elsewhere were used to access accounts. Contacts, birth dates and mileage activity could be exposed, but accounts did not contain Social Security numbers or full card numbers.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
Affected accounts were locked at the time. Contact official support about account recovery and mileage transfers, use a non-reused password, and review statements. The historical monitoring enrollment deadline was April 30, 2015.
Official service URL
Source URLs
- Official operator evidencehttps://oag.ca.gov/ecrime/databreach/reports/sb24-48070Service and operation documentation
- Official incident notice and guidancehttps://oag.ca.gov/system/files/American%20Airlines%20Notice_0.pdfService and operation documentation
Related official sources
- Official operator evidenceOfficial information directoryIdentifies American Airlines, Inc. and the relevant scope.
- Official incident notice and guidanceOfficial notice; link to this PHP incident unconfirmedConfirms incident scope and guidance for affected people.
Comments