American Express Travel Related Services Company, Inc. notified California regulators of a data security incident involving the illegal acquisition of card member information by an arrested individual. Stolen data included names, account numbers, expiration dates, security codes, addresses, phone numbers, emails, mother's maiden name, and potentially Social Security numbers. American Express provided affected individuals with a complimentary one-year membership to Experian’s ProtectMyID Elite and continues to monitor accounts for fraud while cooperating with law enforcement.