American Express notified customers that a merchant where they used their card experienced unauthorized access to data files on December 1, 2014. Affected data included card account numbers, names, and expiration dates. Social Security numbers were not impacted. American Express placed additional fraud monitoring on affected cards and stated customers are not liable for fraudulent charges.