American Airlines learned it was breached from phishing targets

bleepingcomputer.com