AMERICAN EXPRESS COMPANY

American Express National Bank disclosed that on February 19, 2025, some personal information related to High Yield Savings Account customers was inadvertently disclosed to an unauthorized third party. The bank is monitoring accounts for fraud and offering two years of complimentary Experian IdentityWorks identity theft protection.

American Express Travel Related Services Company notified customers that a third-party service provider suffered a cyber attack on July 26, 2022, potentially impacting customer information. American Express confirmed on November 3, 2022, that some customer data was involved. The company is monitoring accounts for fraud and offering two years of complimentary Experian IdentityWorks identity theft protection. No specific data types or affected counts were disclosed in the sample letter.

American Express Travel Related Services Company reported a data breach affecting 52 Maine residents. The breach, which was discovered on July 26, 2022, involved an external system hack. The compromised information includes names and driver's license or non-driver identification card numbers. The company offered 24 months of identity theft protection services through Experian.

American Express Travel Related Services Company reported a data breach to the Montana Attorney General. The breach was reported on 2020-06-30. The breach occurred from 4/16/2020 to 4/18/2020. 3 Montana residents were affected.

American Express reported a data breach to the Montana Attorney General. The breach was reported on 2019-09-30. The breach occurred from 8/28/2019 to 9/11/2019. 2 Montana residents were affected.

American Express Travel Related Services Company, Inc. disclosed a data breach involving its third-party vendor, Expedia, affecting the Orbitz travel booking platform. The incident, occurring between July 5 and July 9, 2018, exposed customer names, payment card information, email, and physical/billing addresses. American Express notified affected individuals on July 31, 2018, offering two years of Experian IdentityWorks. The attack targeted the vendor's platform, not American Express's core systems.

American Express notified California residents that a data security incident occurred at a merchant where they used their cards. Account information, including card numbers, names, and expiration dates, may have been compromised. American Express systems were not directly breached; the incident involved a third-party merchant. The breach date is listed as December 7, 2013. American Express is monitoring accounts for fraud.

American Express notified California residents that a data security incident occurred at a third-party merchant where they used their cards. The incident, dated June 2, 2014, potentially compromised card account numbers, names, and expiration dates. American Express systems were not compromised. The company is monitoring accounts for fraud and advised customers to review statements.

American Express notified California residents that a third-party service provider used by merchants experienced unauthorized access. Card account numbers, names, and expiration dates may have been compromised. American Express systems were not directly breached. The company is monitoring accounts for fraud.

American Express notified customers that a third-party service provider used by merchants experienced unauthorized access. Card account numbers, names, and expiration dates may have been compromised. American Express systems were not directly breached. The incident occurred on November 20, 2014. American Express is monitoring accounts for fraud.