American Express

American Express is alerting customers to the possibility that a security compromise at a third-party service provider has exposed their payment card information.

American Express claims that hackers may have taken data connected to cards that were issued in the past or are now in use.

Account numbers, names, and expiration dates are among the pieces of information that were obtained by unauthorised individuals.

The business clarifies that this event did not affect any systems owned or controlled by American Express, and that this alert is being sent merely as a precaution.

American Express emphasised that the incident had no effect on its financial systems and that it continues to monitor fraudulent activity that could potentially harm cardholders in order to prevent exploitation.

Source: https://securityaffairs.com/45387/data-breach/american-express-data-breach-notice.html

TPRM report: https://scoringcyber.rankiteo.com/company/american-express

"id": "ame1751261023",
"linkid": "american-express",
"type": "Breach",
"date": "03/2016",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Financial Services',
                        'name': 'American Express',
                        'type': 'Credit Card Company'}],
 'attack_vector': 'Third-party service provider compromise',
 'customer_advisories': 'Alerting customers as a precaution',
 'data_breach': {'data_exfiltration': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Account numbers',
                                              'Names',
                                              'Expiration dates']},
 'description': 'American Express is alerting customers to the possibility '
                'that a security compromise at a third-party service provider '
                'has exposed their payment card information.',
 'impact': {'data_compromised': ['Account numbers',
                                 'Names',
                                 'Expiration dates'],
            'payment_information_risk': True},
 'response': {'communication_strategy': 'Alerting customers as a precaution',
              'enhanced_monitoring': 'Continuous monitoring for fraudulent '
                                     'activity'},
 'threat_actor': 'Unauthorized individuals',
 'title': 'American Express Data Breach',
 'type': 'Data Breach'}