Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

American Airlines disclosed in September 2022 that unauthorized activity affected a limited number of employee email accounts after phishing emails were reported from an employee account. Information in those accounts may have included sensitive personal details, but the filings do not establish a breach of the airline’s full customer database or reservation system.

What happened in the American Airlines phishing incident?

American said it identified unauthorized activity in its Microsoft 365 environment on July 5, 2022, after people reported receiving phishing emails sent from an employee account. Its notices, filed on behalf of American Airlines and subsidiaries Envoy Air and Piedmont Airlines, describe affected employee email accounts. American secured the applicable accounts and hired an outside cybersecurity forensic firm to investigate. The consumer notice says the review included an eDiscovery exercise to identify personal information in the accounts. Maryland filing Sample consumer notice

The incident was not reported as a breach of American’s entire customer database or reservation system. Contemporary reporting characterized the number of affected employee accounts as “very small,” but the cited reports did not give a total. SecurityWeek Contemporary company statement

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What personal information may have been exposed?

The information varied by person and could relate to an application to or employment with American, services provided, or benefits received. The sample notice lists these possible categories:

#1 Best Overall
Nezyo 2 Pack Identity Protection Roller Stamp 4 Pack Refill Ink,Yellow
  • Protect Your Privacy Effectively: you can use this identity protection roller stamp to flip personal information in under 2 seconds and save time and effort, effectively hiding and protecting your personal information, such as phone numbers, social security numbers, bank statements, shipping addresses, tax documents,data, billing addresses and many more
  • Ideal Replacement for Shredder: if you are still using a shredder to shred cards or papers that are printed with your personal information, this security stamper roller will be an alternative tool to block out your privacy effectively and easily
  • Refillable and Long Term Use: this confidential stamp can cover a total length of up to 100 meter/ 109 yards, approximately 3,200 prints are covered, pattern width is about 0.78 inches; When ink runs out, you can refill the security stamp with ink
  • Easy to Use: just continuous roll the address blocker roller stamp to conceal information, and roll on a second layer for maximum protection, works on paper, envelopes, folders, address labels, etc., please note that may not work on smooth surfaces
  • How to Refill the Ink: there are 4 pieces of ID stamp refills, each is about 1.5 ml, you just need to unscrew the cap of the ink bottle (not disposable, you can close the cap for next time of use), then insert it into the hole on the side of the stamp, then turn it upside down, about 5 minutes later, the most of the ink will be replenished to the security roller stamp
  • Name, employee number, date of birth, mailing address, phone number, and email address.
  • Social Security number, driver’s license number, passport number, airman certification number, or military identification number.
  • Certain medical information.

These are potential categories in affected accounts, not a statement that every person’s information—or every category—was involved. American’s sample notice does not establish that payment card information was exposed. Sample consumer notice

How many people were affected?

American’s filing to the Maryland Office of the Attorney General estimated that approximately 37 Maryland residents may have been affected. That is a Maryland-specific estimate, not a national total; the cited filings and reports do not establish the total number of people affected across the United States. Maryland filing

Rank #2
Identity Theft Protection Roller Stamp, 1 Refill Ink - Confidential Roller Stamp for Identity Protection & Security Stamps- Blocking Out Privacy Information and Guard Your Address and ID
  • ▶ Identity Theft Protection Roller Stamp- Specifically designed to obscure sensitive data, TONOS confidential roller stamp ensures the utmost security and confidentiality of your information. Perfect for anyone who concerned about their privacy and security!
  • ▶ Very Handy Roller Stamp- Just one or two swipes and the privacy stamp roller can easily conceal personal and confidential information on envelopes, bills, documents, bank statements, and other mail.
  • ▶ Easy to Use- Save time and money on shredding documents! Privacy roller stamp is an effective solution to cover sensitive information before you toss out the papers.
  • ▶ Dense coverage Stamp- The security stamp can completely block out all information on most paper documents and dries quickly, simply roll it over your info and it is unreadable.
  • ▶ Refillable & Reusable- The stamp roller comes with refill ink which is long lasting and water resistant when it dries on paper.

Did American report misuse of the information?

In its September 16, 2022 notice, American said it had no evidence that the potentially affected Maryland residents’ information had been or would be misused. The sample consumer notice also said there was no evidence of misuse. These were the company’s findings at the time of notification, not a guarantee about future misuse. Maryland filing Sample consumer notice

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What did American do, and what protection was offered?

American said it secured the affected accounts, engaged an outside cybersecurity forensic firm, reviewed account contents for personal information, and implemented additional technical safeguards. Contemporary reporting said affected individuals were offered two years of identity protection through Experian. That reported offer was for affected people, not a general public service; check the instructions in your own notice to determine eligibility and how to enroll. Sample consumer notice SecurityWeek

Rank #3
2 Pack Identity Theft Protection Roller Stamp, Stamps for Mailing
  • Information Protection: Our identity theft protection stamp features intricate patterns that effectively obscure sensitive details like addresses, phone numbers, and banking information, preventing theft of your personal identity.
  • Easy to Use, Saves Time: With a simple rolling motion, the stamp covers your sensitive information in seconds—no shredder or stickers required. Just roll and you're done! It's the fastest way to protect your privacy while saving valuable time.
  • Comprehensive Privacy Protection: Our identity theft protection roller stamp safeguards confidential information across all document types. Low-noise and mess-free, it's an excellent shredder alternative, creating a seamless identity security experience.
  • Versatile and Universal: Perfect for all types of paper documents containing personal information—like junk mail, bank statements, shipping labels, invoices, and ID cards—this privacy roller stamp meets all your daily privacy protection needs.
  • Durable and Portable Design: Featuring a sturdy plastic casing, this lightweight design lets you take it anywhere. Perfect for travel, work, or daily outings, the high-quality ink delivers excellent coverage that won't fade once dry.

What should you do if you received a notice?

  • Read the notice to see which information may relate to you, what protective service—if any—was offered, and its enrollment instructions.
  • Use contact details printed in the notice or independently verify an official American Airlines contact channel before sharing personal information or acting on an offer.
  • Do not assume that every listed category applies to you. The notice’s details are more relevant to your circumstances than the general list of possible information.

The incident sources do not say that every customer needs to change a password. They also do not establish that payment card information was involved.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How to recognize and report a suspicious American Airlines email

American’s communication-security guidance says not to click links, open attachments, call phone numbers, or follow instructions in suspicious communications. Warning signs include a message making a false claim about an account or flight, a link to a look-alike website, an attachment, urgent demands, or an official-looking sender name paired with an unrelated email address. American Airlines communication-security guidance

Best Value
Vantamo Identity Theft Protection Roller Stamp for Hiding Sensitive Information, Wide Confidential Stamp with 6 Ink Refill, Security Stamp Roller for Identity Theft Prevention, Classy Blue
  • The id defender roller is the ultimate tool for guarding your personal data at home or in the office. Prevent identity theft by quickly masking sensitive information on mail, documents, or labels, giving you confidence that your details remain private and secure with Vantamo id theft protection.
  • Effortlessly block out sensitive text with the label cover up identity protection, designed for quick, one-handed use. No more scraping off all shipping labels or doing a lot of swipes with a marker! Even first-time users will find the process intuitive and straightforward, making it a practical label eraser roller for anyone!
  • Vantamo wide rolling privacy marker is fully refillable and arrives with 6 ink refill for self inking stamps ensuring lasting performance. Don't run out when you need it the most. The ink is specially designed for hiding information.
  • Our address blackout stamp not only protects your privacy but also helps the environment. After using the roller on your documents, the paper is ready to be safely recycled, making this address eraser a smart alternative to shredding or tossing documents.
  • Here at Vantamo, we are creating products that people love! We are committed to providing excellent customer service on every black out stamp. If you ever have questions or concerns, our team is here to help, ensuring your id defender delivers reliable protection and peace of mind every time.
Rank #4
Guard Your ID Identity Theft Protection Roller Stamp, 3-Pack for Mail
  • WHAT DOES IT COVER: Roll once over names, addresses, account numbers, barcodes, and prescription details on mail, statements, shipping labels, and boxes before recycling. The patented 0.5" masking pattern hides 3 lines of text in one pass.
  • HOW MANY USES DO YOU GET: Each pre-inked Guard Your ID Advanced Roller delivers about 1,000 impressions (roughly 100 feet of coverage), so the 3-pack gives you around 3,000. A twist-on cap keeps the ink fresh for a 2-year shelf life.
  • DOES IT WORK ON GLOSSY LABELS: Yes, on most glossy and coated surfaces, plus paper, envelopes, junk mail, and prescription labels. Give the ink 10 to 15 seconds to dry on slick surfaces; it is instant on paper. Results vary by coating.
  • IS IT REFILLABLE: No, and that is the point. The Advanced Roller is pre-inked and sealed, so there are no refill cartridges to buy, no ink bottles to handle, and nothing to dry out on the shelf. When one runs out, reach for the next roller.
  • SHREDDER OR ROLLER: No jams, no paper dust, no noise, and the page stays intact and recyclable. Covers boxes and shipping labels a shredder cannot. Faster than a redacting marker, fits in a drawer. Turquoise, Green, White: mail, office, parent.
  1. Do not interact with the message: avoid its links, attachments, phone numbers, and instructions.
  2. Report suspicious email to aa.it.security@aa.com, as American directs.
  3. If you need to check a flight or account, go to American’s official website or app independently rather than using a link in the message.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.