The dongle idea is interesting but are we assuming someone is plugging in a dongle and making noises, on all these flights, sometimes for the duration of the flight and nobody finds these dongles?
Assuming it’s one person with the dongle responsible for all 3-4 instances of this - it would be pretty easy for AA to figure out who’s doing it if this is the case, just check if there’s a common passenger on every flight where the issue was reported
What's it jacked into, though? There are some amazingly flat card skimmers out there these days, and even cameras to place on ATMs that are disguised as panels. It could be something with a 1/8" form factor that just looks like part of the interior of the bin. For that matter, it could be a whole modified bin installed by a disgruntled employee.
it’s unlikely they’re doing this live, it would be way too obvious. The toilets would also be the first place they’d check. I’m guessing they’re using some recording.