I'll notice whether other airlines get spoofed.
I made a round trip to Dallas last November (from Baltimore) on American, and do have a legitimate account with American. I don't know if it could have been hacked. I also have accounts with Delta and USAir.
I would think that the TSA would be investigating this development. Of course, the fake tickets would not scan at an airport.
Picture: Great Salt Lake Desert, Utah