AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC.

American Express Travel Related Services Company notified customers that a third-party service provider suffered a cyber attack on July 26, 2022, potentially impacting customer information. American Express confirmed on November 3, 2022, that some customer data was involved. The company is monitoring accounts for fraud and offering two years of complimentary Experian IdentityWorks identity theft protection. No specific data types or affected counts were disclosed in the sample letter.

American Express Travel Related Services Company reported a data breach affecting 52 Maine residents. The breach, which was discovered on July 26, 2022, involved an external system hack. The compromised information includes names and driver's license or non-driver identification card numbers. The company offered 24 months of identity theft protection services through Experian.

American Express Travel Related Services Company reported a data breach to the Montana Attorney General. The breach was reported on 2020-06-30. The breach occurred from 4/16/2020 to 4/18/2020. 3 Montana residents were affected.

American Express Travel Related Services Company, Inc. disclosed a data breach involving its third-party vendor, Expedia, affecting the Orbitz travel booking platform. The incident, occurring between July 5 and July 9, 2018, exposed customer names, payment card information, email, and physical/billing addresses. American Express notified affected individuals on July 31, 2018, offering two years of Experian IdentityWorks. The attack targeted the vendor's platform, not American Express's core systems.

American Express Travel Related Services Company, Inc. reported a data breach involving its third-party vendor, Orbitz. The incident affected the Orbitz booking platform, impacting transactions from January 1, 2016, through December 22, 2017. The breach exposed customer personal information, including names, payment card details, dates of birth, phone numbers, email addresses, and physical/billing addresses. American Express notified affected individuals, offering two years of Experian IdentityWorks and fraud monitoring. The Orbitz platform has been remediated.

American Express notified California residents that a data security incident occurred at a merchant where they used their cards. Account information, including card numbers, names, and expiration dates, may have been compromised. American Express systems were not directly breached; the incident involved a third-party merchant. The breach date is listed as December 7, 2013. American Express is monitoring accounts for fraud.

American Express notified California residents that a data security incident occurred at a third-party merchant where they used their cards. The incident, dated June 2, 2014, potentially compromised card account numbers, names, and expiration dates. American Express systems were not compromised. The company is monitoring accounts for fraud and advised customers to review statements.

American Express notified California residents that a third-party service provider used by merchants experienced unauthorized access. Card account numbers, names, and expiration dates may have been compromised. American Express systems were not directly breached. The company is monitoring accounts for fraud.

American Express notified customers that a third-party service provider used by merchants experienced unauthorized access. Card account numbers, names, and expiration dates may have been compromised. American Express systems were not directly breached. The incident occurred on November 20, 2014. American Express is monitoring accounts for fraud.

American Express notified customers that a third-party service provider engaged by merchants experienced unauthorized access. American Express systems were not compromised, but customer name, address, card number, expiration date, and security code may have been involved. The breach date is listed as December 21, 2014.

American Express notified California residents that their card account numbers, expiration dates, effective dates, and four-digit front-of-card codes were recovered during a law enforcement and/or American Express investigation. The company stated that Social Security numbers were not impacted and no unauthorized activity was detected. Additional fraud monitoring was placed on affected cards.

American Express notified California cardholders that a third-party merchant's website suffered unauthorized access, exposing American Express card account numbers, cardholder names, and card expiration dates. Social Security numbers were not impacted. The breach occurred around November 1, 2010. American Express placed additional fraud monitoring on affected accounts and provided identity theft assistance resources.

American Express notified customers that a merchant where they used their cards detected unauthorized access to its data files on April 2, 2012. The affected data included American Express Card account numbers, names, and expiration dates. Social Security numbers were not impacted. American Express placed additional fraud monitoring on affected cards and reminded customers they are not liable for fraudulent charges.