The California Office of the Attorney General reported a data breach involving American Express Travel Related Services Company, Inc. on January 27, 2016. The breach occurred on April 23, 2015, due to unauthorized access to a third-party service provider, potentially compromising the account information of some Card Members, including names and card numbers.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-59818
TPRM report: https://www.rankiteo.com/company/american-express
"id": "ame824072825",
"linkid": "american-express",
"type": "Breach",
"date": "4/2015",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Financial Services',
'name': 'American Express Travel Related Services '
'Company, Inc.',
'type': 'Company'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'type_of_data_compromised': ['Account information',
'Names',
'Card numbers']},
'date_detected': '2016-01-27',
'date_publicly_disclosed': '2016-01-27',
'description': 'The California Office of the Attorney General reported a data '
'breach involving American Express Travel Related Services '
'Company, Inc. on January 27, 2016. The breach occurred on '
'April 23, 2015, due to unauthorized access to a third-party '
'service provider, potentially compromising the account '
'information of some Card Members, including names and card '
'numbers.',
'impact': {'data_compromised': ['Account information',
'Names',
'Card numbers']},
'references': [{'date_accessed': '2016-01-27',
'source': 'California Office of the Attorney General'}],
'title': 'American Express Travel Related Services Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Third-party service provider'}