- This week a threat actor leaked data of 10,000 Mexico-based American Express credit cardholders on a forum.
- As analyzed by BleepingComputer, the leaked sample data set of 10,000 records exposes full American Express account (credit card) numbers and customers’ personally identifiable information (PII) including name, full address, phone numbers, date of birth, gender, etc.
- However, BleepingComputer did not see credit card expiration dates, passwords, or overly sensitive financial data in the posted spreadsheet that could enable misuse of the credit cards in fraudulent transactions.
- American Express neither denied nor admitted that they had suffered a data breach, but shared that all Amex cardholders are not liable for fraudulent charges.
– Ax Sharma | January 5, 2021
