American Express Travel Related Services Company, Inc. and/or its Affiliates

American Express notified customers that a merchant where they used their card detected unauthorized access to its data files on February 1, 2013. The affected data included American Express Card account numbers, names, and expiration dates. Social Security numbers were not impacted. American Express placed additional fraud monitoring on affected cards and offered identity theft assistance.

American Express disclosed unauthorized access to its cardmember data via a third-party payment processor (Celerant). The incident occurred on January 15, 2013. Affected data included names, card account numbers, expiration dates, and security codes. Social Security numbers were not impacted. American Express implemented additional fraud monitoring and offered identity theft assistance.

American Express notified California AG that cardholder information (account numbers, names, expiration dates) was recovered during a law enforcement investigation. SSN was not impacted. No unauthorized activity detected. Additional fraud monitoring placed on accounts.