American Express notified customers that a merchant where they used their card detected unauthorized access to website files on April 12, 2014. Affected data included card account numbers, names, and expiration dates. Social Security numbers were not impacted. American Express placed additional fraud monitoring on affected cards and advised customers to review statements and credit reports.