What You Need to Know About the American Express Customer Data Leak

American Express has informed its customers that their credit card information was compromised in a breach involving a third-party service provider. In a data breach report submitted to the state of Massachusetts, the financial services company clarified that its own systems were not infiltrated. Instead, the breach originated from a provider commonly used by American Express' travel services division.

Exposed information includes American Express card account numbers, names, and expiration dates. Customers with multiple American Express cards affected by the breach can anticipate further communication from the company. Those potentially impacted are advised to monitor their accounts for any unauthorized transactions over the next 12 to 24 months.

The Wiseasy hack of 2022, which compromised the popular Android-based payment system used in the Asia-Pacific region, affected 140,000 payment terminals globally. These terminals are commonly found in restaurants, hotels, retail outlets, and schools. It is unclear whether Wiseasy notified its customers about the hack.

American Express has launched an investigation into the incident and has informed regulatory authorities and affected customers. The company advises customers to carefully review their account statements for the next 12 to 24 months and report any suspicious activity. American Express does not hold card members responsible for any fraudulent purchases.

Additional recommendations include enabling instant notifications through the American Express mobile app, allowing users to monitor their purchases and receive fraud alerts in real-time.