American Express issues a warning to its customers regarding a data breach originating from a third-party merchant processor. Although American Express’s systems remained uncompromised, the breach led to unauthorized access to account information, including card numbers and names. The company promptly filed a data breach notification with the state of Massachusetts, alerting affected customers to the potential exposure of their credit card data.
Despite the lack of specifics regarding the impacted customers, merchant processor, and timing of the breach, American Express has taken steps to notify regulatory authorities and affected individuals. In response to the breach, the company advises customers to closely monitor their account statements for any suspicious activity over the next 12 to 24 months. Additionally, customers are encouraged to enable instant notifications through the American Express mobile app to receive alerts about fraudulent transactions.
To mitigate potential risks associated with stolen credit card information, American Express suggests that affected customers consider requesting new card numbers. This precautionary measure aims to thwart any attempts by threat actors to exploit compromised card details for fraudulent activities. The company underscores its commitment to customer security by promptly investigating data security incidents and complying with applicable laws and regulations to safeguard customer information.