American Express notified customers that a merchant where they used their cards detected unauthorized access to its data files on April 2, 2012. The affected data included American Express Card account numbers, names, and expiration dates. Social Security numbers were not impacted. American Express placed additional fraud monitoring on affected cards and reminded customers they are not liable for fraudulent charges.