AMERICAN EXPRESS TRAVEL RELATED SERVICES COMPANY, INC.

American Express Travel Related Services Company, Inc. disclosed a data breach involving its third-party vendor, Expedia, affecting the Orbitz travel booking platform. The incident, occurring between July 5 and July 9, 2018, exposed customer names, payment card information, email, and physical/billing addresses. American Express notified affected individuals on July 31, 2018, offering two years of Experian IdentityWorks. The attack targeted the vendor's platform, not American Express's core systems.