American Express Company

The California Office of the Attorney General reported a data breach involving the American Express Travel Related Services Company, Inc. on September 13, 2012. The breach occurred on April 2, 2012, involving unauthorized access to a merchant's data files, exposing American Express Card account numbers, names, and expiration dates, but not Social Security numbers. The number of individuals affected is unknown.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-36434

TPRM report: https://www.rankiteo.com/company/american-express

"id": "ame957072625",
"linkid": "american-express",
"type": "Breach",
"date": "4/2012",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Financial Services',
                        'name': 'American Express Travel Related Services '
                                'Company, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'type_of_data_compromised': ['American Express Card account '
                                              'numbers',
                                              'names',
                                              'expiration dates']},
 'date_detected': '2012-04-02',
 'date_publicly_disclosed': '2012-09-13',
 'description': "Unauthorized access to a merchant's data files, exposing "
                'American Express Card account numbers, names, and expiration '
                'dates.',
 'impact': {'data_compromised': ['American Express Card account numbers',
                                 'names',
                                 'expiration dates']},
 'references': [{'source': 'California Office of the Attorney General'}],
 'title': 'American Express Travel Related Services Company Data Breach',
 'type': 'Data Breach'}