The California Office of the Attorney General reported a data breach on March 22, 2015, affecting American Express Travel Related Services Company, Inc. The breach involved unauthorized access to a third-party service provider's system, compromising Card Members' account information. The incident was reported on January 7, 2016, but the exact number of individuals affected was not disclosed.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-59526
TPRM report: https://www.rankiteo.com/company/american-express
"id": "ame701072825",
"linkid": "american-express",
"type": "Breach",
"date": "3/2015",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Financial Services',
'name': 'American Express Travel Related Services '
'Company, Inc.',
'type': 'Company'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'type_of_data_compromised': "Card Members' account "
'information'},
'date_detected': '2015-03-22',
'date_publicly_disclosed': '2016-01-07',
'description': 'The California Office of the Attorney General reported that '
'American Express Travel Related Services Company, Inc. '
'experienced a data breach on March 22, 2015, which affected '
"Card Members' account information. The breach was reported on "
'January 7, 2016, and involved unauthorized access to a '
"third-party service provider's system, but specifics about "
'the number of individuals affected were not provided.',
'impact': {'data_compromised': "Card Members' account information"},
'references': [{'source': 'California Office of the Attorney General'}],
'title': 'American Express Data Breach',
'type': 'Data Breach'}