American Express notified California residents that a merchant where they used their card detected unauthorized access to its website files on July 11, 2011. The breach exposed card account numbers, names, and expiration dates. Social Security numbers were not impacted. American Express placed additional fraud monitoring on affected accounts and advised customers to review statements and credit reports.