American Express Travel Related Services Company, Inc. reported a data breach involving unauthorized access to a merchant's website files. The incident exposed cardholder names, American Express account numbers, and expiration dates. Social Security numbers were not impacted. The company placed additional fraud monitoring on affected accounts and provided guidance to cardholders on identity theft protection.