American Express notified the California AG that cardmember information (card account number, name, expiration date) was recovered during a law enforcement investigation. The breach date is listed as June 26, 2012. American Express placed additional fraud monitoring on affected cards and stated it does not hold cardmembers liable for fraudulent charges. No specific attack vector or number of affected individuals was disclosed in the filing.