Clustered 6 filings across 1 jurisdiction · filing window Jul 11, 2012 → Sep 5, 2012. View entity profile → Other incidents for this victim →
incident inc_7b4d3d0f5ff4441e · merge_method deterministic · confidence 100%
Time between earliest and latest filing
Not recorded for this incident
Discovery variance · Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster; needs two dated filings.
Financial account · Identity (basic)
CA
all State AG
Earliest sighting first · deep chronology in Litigation Timeline
Apr 1, 2012
When the intrusion reportedly occurred, per the linked filings
American Express notified customers that their card account numbers, names, and expiration dates were recovered during a law enforcement and/or American Express investigation. The company stated that Social Security numbers were not impacted and no unauthorized activity was detected. Additional fraud monitoring was placed on affected cards.
American Express notified customers that their card account numbers, names, and expiration dates were recovered during a law enforcement investigation. The company stated that Social Security numbers were not impacted and no unauthorized activity was detected. Additional fraud monitoring was placed on affected cards, and customers were advised to review statements and consider fraud alerts.
A merchant's website suffered unauthorized access, exposing American Express Cardmember data including card account numbers, cardholder names, and card expiration dates. American Express was not directly breached; the compromise occurred at a third-party merchant. AXP placed additional fraud monitoring on affected accounts and notified cardmembers. No SSNs or indication of unauthorized card activity was reported.
American Express notified customers that their card account numbers, names, and expiration dates were recovered during a law enforcement investigation. The company stated that Social Security numbers were not impacted and no unauthorized activity was detected. Additional fraud monitoring was placed on affected cards, and customers were advised to review statements and contact the company if suspicious activity occurred.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
American Express notified customers that their card account numbers, names, and expiration dates were recovered during a law enforcement investigation. The company states that Social Security numbers were not impacted and no unauthorized activity was detected. Additional fraud monitoring was placed on affected cards.
American Express notified customers that their card account numbers, names, and expiration dates were recovered during a law enforcement investigation. No Social Security numbers were impacted, and no unauthorized activity was detected. American Express placed additional fraud monitoring on affected cards and stated it does not hold cardmembers liable for fraudulent charges.