In an era of Facebook data breaches, and the huge Marriott breach, cybersecurity is top of mind.
We’re constantly being reminded not to click on links sent to us over email. Scammers now even make fake websites that look like the real thing, with URLs that look real too. It’s becoming increasingly important to call out bad security practices, like IHG Rewards Club using a four digit PIN for member passwords or United sending out unsolicited password reset emails telling members to click the links.
Yesterday American Airlines sent end of year review emails. I wrote about how few miles I earned from flying 100,000 miles and how scarce complimentary upgrades have become for someone like me flying the ‘consultant schedule’ peak business travel days and times and flying between American’s hubs.
The airline encouraged members to share their activity via social media, embedding links to do so.
Members who took them up on this right when their email went out also posted their frequent flyer number and e-mail address. Oops. American is now telling members they need to delete those posts and monitor their accounts in case all their miles are stolen.
On December 20, 2018, we sent you an email containing your 2018 year in review detailing your AAdvantage® program activity. The email contained hyperlinks for you to share this information with friends and family on Facebook and Twitter. At the time the email was sent, those links inadvertently included your AAdvantage number and email address associated with your AAdvantage account. If you shared the link on Facebook or Twitter, that information was made visible to those with access to your social media post. We quickly corrected the issue, however, our records show you may have posted the link before we caught the error thereby exposing your AAdvantage number and email address.
If you do not want this information posted on social media, we recommend that you remove the post. We also recommend you actively monitor your account and let us know if you observe any suspicious activity…
That was part of the year end that American didn’t exactly intend.
(HT: Anthony H.)