American Express Travel Related Services Company, Inc. and/or its Affiliates

A merchant's website suffered unauthorized access, exposing American Express Cardmember data including card account numbers, cardholder names, and card expiration dates. American Express was not directly breached; the compromise occurred at a third-party merchant. AXP placed additional fraud monitoring on affected accounts and notified cardmembers. No SSNs or indication of unauthorized card activity was reported.