HackingHacking OtherCustomer Data InvolvedIDENTITY_GOVERNMENTMedium
AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC.
bd_7e47082c9bf03a69 · schema v1 · pii pii-v1
Full breach record for AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC. →American Express Travel Related Services Company reported a data breach affecting 52 Maine residents. The breach, which was discovered on July 26, 2022, involved an external system hack. The compromised information includes names and driver's license or non-driver identification card numbers. The company offered 24 months of identity theft protection services through Experian.
Maine clockDiscovered Jul 26, 2022 → Filed with AG Nov 18, 2022115d ✗ ME AG >90d16 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_6a077442be4fd9d6California State AGfiled 2022-11-18Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/39e7ed2d-5f03-4921-a2c9-5813dd686c72.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 18, 2022
- Raw hash
- ecf4aad135d957e1913f3bb568eabe6bd272b592dfdb44897374ec42ab112744
Reporting entity
- Name
- AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC.norm: american express travel related
Victim entity
- Name
- AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC.norm: american express travel related
Incident
- Discovered
- Jul 26, 2022
- Materiality determined
- —
- Notification sent
- Nov 18, 2022
- Affected individuals
- 52
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 16 weeks(115 days from discovery to filing)
- Compliance flags
- ME AG >90d · 115dME resident >60d · 115d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 26, 2022→ Filed with AG: Nov 18, 2022115d 90 days ME AG >90d Maine Discovered: Jul 26, 2022→ Notified: Nov 18, 2022115d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.