American Express Travel Related Services Company, Inc. and/or its Affiliates

American Express notified California cardmembers that a merchant (third party) experienced unauthorized access to their website, exposing American Express card account numbers, cardholder names, and card expiration dates. No Social Security numbers were compromised. American Express applied additional fraud monitoring on affected accounts and encouraged cardmembers to review their statements. The breach date was August 3, 2012; the notice is dated November 20, 2012.