Amex Customer Data Exposed in Third-Party Breach
The breach occurred through a third-party service provider frequently used by the company's travel services division.
https://www.darkreading.com/cyberattacks-data-breaches/amex-customer-data-exposed-third-party-breach