The California Office of the Attorney General reported a data breach involving American Express Travel Related Services Company, Inc. on August 2, 2018. The breach occurred on July 5, 2018, due to unauthorized access to personal information on the Orbitz travel booking platform, potentially affecting customer names, payment card information, email addresses, and physical addresses. An estimated number of individuals affected has not been specified.

The California Office of the Attorney General disclosed a data breach affecting American Express Travel Related Services Company, Inc., linked to a third-party platform, Orbitz. The incident involved unauthorized access to sensitive customer data, with the breach occurring on October 1, 2017, but reported on March 22, 2018. Compromised information included full names, payment card details, dates of birth, phone numbers, email addresses, physical addresses, and gender. The breach exposed customers to risks such as identity theft, financial fraud, and phishing attacks, given the breadth of personal and financial data accessed. While the exact number of affected individuals was not specified in the report, the nature of the exposed data—particularly payment card information—suggests significant potential for misuse. The delay in detection (over five months) further exacerbated vulnerabilities, allowing attackers prolonged access. The incident underscored weaknesses in third-party vendor security, as the breach originated from Orbitz’s systems, indirectly impacting American Express customers who had used its travel services.

The California Office of the Attorney General disclosed a data breach affecting American Express Travel Related Services Company, Inc. in March 2016. The incident involved unauthorized exposure of Card Members' account information at a third-party merchant. Compromised data may have included card numbers, names, and expiration dates, though the exact number of impacted individuals and the breach method were not publicly revealed. While no evidence suggested misuse of the exposed data, the breach posed risks such as potential financial fraud or identity theft for affected customers. The exposure of payment card details—even without additional personal identifiers—heightens vulnerabilities in financial transactions, potentially damaging customer trust and the company’s reputation. American Express likely initiated investigations and mitigation measures, such as card reissuance or monitoring services, to limit further harm. However, the lack of transparency regarding the breach’s scope and origin left uncertainties about the full extent of the incident’s impact.

The California Office of the Attorney General reported a data breach involving American Express Travel Related Services Company, Inc. on May 27, 2015. The unauthorized access potentially compromised customer Card account numbers and names, but Social Security numbers were not impacted. The specific date of the breach is not available.

The California Office of the Attorney General disclosed a data breach affecting American Express Travel Related Services Company, Inc. and/or its affiliates. The incident involved the potential compromise of customer payment card details, including American Express Card account numbers, cardholder names, and expiration dates. While the breach exposed sensitive financial data, no Social Security numbers or other highly sensitive personal information were reported as impacted. The exact date of the breach remains undisclosed, but it was officially reported on March 25, 2014. The exposed data poses risks such as fraudulent transactions, unauthorized card usage, or phishing attempts targeting affected customers. Although the breach did not involve broader identity theft (e.g., SSNs), the leakage of payment card details alone can lead to financial losses for customers and reputational damage for American Express. The company likely faced regulatory scrutiny and was required to notify affected individuals, implement remediation measures, and enhance security protocols to prevent future incidents. The breach underscores vulnerabilities in payment card data protection, particularly within travel-related financial services.