American Express Travel Related Services Company, Inc. and/or its Affiliates
bd_ca7faa254fbb52c3 · schema v1 · pii pii-v1
Full breach record for American Express Travel Related Services Company, Inc. and/or its Affiliates →American Express Travel Related Services Company, Inc. notified California regulators of a data security incident involving the illegal acquisition of card member information by an arrested individual. Stolen data included names, account numbers, expiration dates, security codes, addresses, phone numbers, emails, mother's maiden name, and potentially Social Security numbers. American Express provided affected individuals with a complimentary one-year membership to Experian’s ProtectMyID Elite and continues to monitor accounts for fraud while cooperating with law enforcement.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f0adb5cd26e383e0California State AGfiled 2014-12-19(42d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-47376
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 7, 2014
- Raw hash
- ac11e5067dfbcadd7f923a5f34ddb91fd3ec0cdb312e857c005b468dbc13c107
Reporting entity
- Name
- American Express Travel Related Services Company, Inc. and/or its Affiliatesnorm: american express travel related services company inc and or its affiliates
- Domain
- americanexpress.com
Victim entity
- Name
- American Express Travel Related Services Company, Inc. and/or its Affiliatesnorm: american express travel related services company inc and or its affiliates
- Domain
- americanexpress.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Law enforcement officials informed us that they arrested an individual
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.