HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained

AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC.

bd_0c70f0408fb18e9c · schema v1 · pii pii-v1

Full breach record for AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC. →

American Express notified customers that a third-party service provider engaged by merchants experienced unauthorized access. American Express systems were not compromised, but customer name, address, card number, expiration date, and security code may have been involved. The breach date is listed as December 21, 2014.

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

bd_252e4e607ca16debCalifornia State AGfiled 2016-01-26(18d gap)Candidate
bd_27692d6a021d4403California State AGfiled 2016-01-27(19d gap)Candidate
bd_996f71bb94d78f5bCalifornia State AGfiled 2016-01-28(20d gap)Candidate

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-59533
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 8, 2016
Raw hash: c8efbce3cb4340a54d5bd51710b3641f1f7cd81e03f2bd1a6afb7945eeb92e77

Reporting entity

Name: AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC.
norm: american express travel related

Victim entity

Name: AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC.
norm: american express travel related

Incident

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
Attack vector: Third-Party / Supply Chain
Threat actor: External
Third party: via third party service provider engaged by numerous merchants
Initial access: supply_chain

Compliance

Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.