--- title: Unpacking the American Express Third-Party Breach description: Unpack the recent American Express third-party breach incident, learn about the exposed data, American Express's response, and essential tips for cardholders and organizations to enhance security measures. image: https://vorlon.io/hubfs/Bite%20Sized%20Breaches%20(y).png --- [Saas Security Blog](https://vorlon.io/saas-security-blog) > Unpacking the American Express Third-Party Breach # Unpacking the American Express Third-Party Breach [Lauren Lee](https://vorlon.io/saas-security-blog/author/lauren-lee) | Mar 13, 2024 [![Share on linkedin](https://vorlon.io/hubfs/ll-assets/Images/Icons/LinkedIn.svg) ](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fvorlon.io%2Fsaas-security-blog%2Funpacking-the-american-express-third-party-breach%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://vorlon.io/hubfs/ll-assets/Images/Icons/X.svg) ](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fvorlon.io%2Fsaas-security-blog%2Funpacking-the-american-express-third-party-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fvorlon.io%2Fsaas-security-blog%2Funpacking-the-american-express-third-party-breach%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Unpacking+the+American+Express+Third-Party+Breach) [![Share on email](https://vorlon.io/hubfs/ll-assets/Images/Icons/envelope.svg) ](mailto:?subject=Check%20out%20https%3A%2F%2Fvorlon.io%2Fsaas-security-blog%2Funpacking-the-american-express-third-party-breach%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fvorlon.io%2Fsaas-security-blog%2Funpacking-the-american-express-third-party-breach%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Unpacking the American Express Third-Party Breach](https://vorlon.io/hs-fs/hubfs/Bite%20Sized%20Breaches%20(y).png?width=1200&height=820&name=Bite%20Sized%20Breaches%20(y).png) ## Introduction American Express recently issued [a warning](https://www.bleepingcomputer.com/news/security/american-express-credit-cards-exposed-in-vendor-data-breach/) to its customers about a data breach. But before you panic, let’s dive into the details to understand what happened and what it means for cardholders and organizations.   ### The Breach The breach occurred not within American Express itself, but at one of its service providers, specifically the one used by their travel services division, American Express Travel Related Services Company. It seems this provider got hacked, leading to unauthorized access to the system.   ### What got exposed?  The exposure involved American Express Card account numbers, names, and card expiration dates. The scale of the breach, the specific service provider's name, and the exact timing of the attack have not been released yet.   ### American Express's Response When prodded for more details, American Express did not reveal much about their business relationships or merchant partners. But they assured that they’ve looped in the necessary regulatory authorities and are in the process of alerting impacted customers. They’ve also made it clear that if your card was used for fraudulent purchases, you wouldn’t be on the hook for those charges.    ### Tips for Cardholders So, what should you do if you’re one of the potentially affected customers? Here are a few pointers:   Stay Vigilant: Keep an eye on your account statements for the next 12 to 24 months for any suspicious activity. Enable Notifications: Through the American Express mobile app, you can set up instant notifications to get alerts about fraud attempts and real-time purchase confirmations. Consider a Card Refresh: If your card details were compromised, it might be wise to ask for a new card number. Better safe than sorry, as stolen card details often end up on the darker corners of the internet.   ### Tips for Organizations Of course, this is just as concerning to cardholders as it is to other organizations. Here are some essential tips for companies looking to shield themselves from third-party breaches like this one:   Strengthen Vendor Management Conduct Thorough Risk Assessments: Before seeking out a new vendor, take the time to assess their security posture. This includes evaluating their data handling practices, security measures, and breach history. Set Clear Security Expectations: When drafting contracts, be explicit about your security requirements. Include clauses that obligate vendors to adhere to specific security standards and report any security incidents immediately.   Implement Monitoring Systems Continuous Monitoring: Keep a watchful eye on your third-party vendors’ security practices. Use tools that offer real-time insights into their security posture, ensuring they consistently meet your standards. Audit Regularly: Schedule periodic audits to verify compliance with agreed-upon security standards. These audits can be a mix of self-assessments, third-party audits, and on-site visits.   Culture of Security Awareness Educate Your Team: Make sure your employees understand the risks associated with third-party vendors. Regular training sessions can help staff recognize potential security threats and respond appropriately. Collaborative Security Practices: Encourage a culture where security is everyone’s responsibility. Facilitate open communication between departments to ensure swift action in the event of a third-party breach.   Develop a Comprehensive Incident Response Plan Prepare for the Worst: Have a well-documented incident response plan that includes procedures for dealing with third-party breaches. This plan should outline the steps to take, who to contact, and how to communicate during a security incident. Test Your Response: Regularly test your incident response plan through drills and simulations. This will help identify any weaknesses and ensure everyone knows their role in a crisis.   Leverage Technology to Your Advantage Use Security Software: Invest in security solutions that can monitor and analyze the traffic between your organization and your third-party vendors. Look for tools that can detect anomalies and block malicious activities. Encrypt Sensitive Data: Ensure that any sensitive data shared with third-party vendors is encrypted. This adds an extra layer of protection, making it more difficult for cybercriminals to access your information.   ## Wrapping Up While it’s unsettling news, especially coming from a giant like American Express, it's a good reminder that we should stay proactive. For consumers, staying proactive means setting up credit monitoring and reviewing your card purchases regularly. For organizations, staying proactive means monitoring third-party apps and being prepared in case of a breach. Remember, in the case of data breaches, it's not a matter of *if you will be breached, *but a matter of *when you will be breached. * About the author ![Lauren Lee](https://vorlon.io/hs-fs/hubfs/Lauren%20Lee%20headshot%20clear%20bg.png?width=120&height=120&name=Lauren%20Lee%20headshot%20clear%20bg.png) [Lauren Lee](https://vorlon.io/saas-security-blog/author/lauren-lee) [Follow me on LinkedIn ](https://www.linkedin.com/in/laurenleeeee/) Lauren Lee is a Sales Engineer at Vorlon with eight years of cybersecurity experience. Before Vorlon, she held a variety of vendor and client-side technical cybersecurity positions, including roles at Palo Alto Networks, Cylance, the U.S. Department ... [Read Full Bio](https://vorlon.io/saas-security-blog/author/lauren-lee) Blog tags - [Breach Response](https://vorlon.io/saas-security-blog/tag/breach-response) [![ShinyHunters Sidebar Ad](https://vorlon.io/hs-fs/hubfs/Images%20-%202026/2026%20CISO%20Report%20Banner%20Ad%20Final.png?width=350&height=520&name=2026%20CISO%20Report%20Banner%20Ad%20Final.png) ](https://cta-service-cms2.hubspot.com/web-interactives/public/v1/track/click?encryptedPayload=AVxigLIFqhHbvMXr9sCtLg3SjGyxucXLDGAEZ6p7hVq%2FHj73J5jIl21ntspuXck0FDhLa5AoCVIiV6UPoFdmfyoCgk5gZhyQN0vNpJbQcKsyBPMqUuCsA79wUgKn%2BCq0jST2BYpRcl6MQO1nqRSUKrW04CR0pGt7umY8qquGOnnq3HJ0%2FYgVqp01i6ughr1Bd0ujJd4m2N8PUt6sJyfXCE46FwKHWOIg3dceObp%2BtoycGA%3D%3D&portalId=24426272) ### Related blogs [View all blogs](https://vorlon.io/blog) [![The Vercel Incident: OAuth Tokens and the AI Supply Chain Attack](https://vorlon.io/hs-fs/hubfs/vercel%20breach%20blog.png?width=400&height=300&name=vercel%20breach%20blog.png) Breach Response ### The Vercel Incident: OAuth Tokens and the AI Supply Chain Attack 7 min read Read More ](https://vorlon.io/saas-security-blog/vercel-incident-oauth-tokens-ai-supply-chain) [![Anodot Breach Exposes Snowflake Customer Data, Including Rockstar Games](https://vorlon.io/hs-fs/hubfs/anodot%20breach.png?width=400&height=300&name=anodot%20breach.png) Breach Response ### Anodot Breach Exposes Snowflake Customer Data, Including Rockstar Games 3 min read Read More ](https://vorlon.io/saas-security-blog/anodot-snowflake-breach-shinyhunters-data-theft) [![Mandiant Research on ShinyHunters Vishing: Why MFA-enabled Doesn’t Mean Protected](https://vorlon.io/hs-fs/hubfs/mandiant%20research%20shinyhunters%20vishing.png?width=400&height=300&name=mandiant%20research%20shinyhunters%20vishing.png) Breach Response ### Mandiant Research on ShinyHunters Vishing: Why MFA-enabled Doesn’t Mean Protected 5 min read Read More ](https://vorlon.io/saas-security-blog/mandiant-research-shinyhunters-vishing-mfa) [![How the Gainsight Breach Exposed a Growing SaaS Supply Chain Threat](https://vorlon.io/hs-fs/hubfs/Gainsight%20Breach.webp?width=400&height=300&name=Gainsight%20Breach.webp) Breach Response ### How the Gainsight Breach Exposed a Growing SaaS Supply Chain Threat 9 min read Read More ](https://vorlon.io/saas-security-blog/the-gainsight-breach-and-saas-supply-chain-attacks) ## Featured resources [![CISO Report Resource Tile](https://vorlon.io/hs-fs/hubfs/CISO%20Report%20Resource%20Tile.webp?width=1548&height=1046&name=CISO%20Report%20Resource%20Tile.webp) WHITE PAPERS AND RESEARCH ### The Agentic Ecosystem SecurityGap: 2026 CISO Report Why 99% of Organizations Were Breached Through Their SaaS and AI Ecosystem Despite Record Security Investment Read more ](https://go.vorlon.io/vorlon-2026-ciso-report-agentic-ecosystem-security-gap) [![blog 451 why saas and ai are converged (1)](https://vorlon.io/hs-fs/hubfs/Images%20-%202026/blog%20451%20why%20saas%20and%20ai%20are%20converged%20(1).png?width=329&height=222&name=blog%20451%20why%20saas%20and%20ai%20are%20converged%20(1).png) SaaS Security ### 451 Research: Why AI and SaaS Security Are Converging 451 Research highlights how AI and SaaS security are converging. Learn why integrations, OAuth, and ecosystem-level risk now define enterprise security. Read more ](https://vorlon.io/saas-security-blog/451-research-ai-saas-security-convergence) [![datamatrix patent blog](https://vorlon.io/hs-fs/hubfs/datamatrix%20patent%20blog.png?width=1548&height=1046&name=datamatrix%20patent%20blog.png) ### DataMatrix™: Vorlon's Patented Approach to Agentic Ecosystem Security Vorlon's DataMatrix™ technology is now patented. Learn how this intelligent simulation engine secures the agentic ecosystem by mapping AI agents, SaaS integrations, and data in motion. Read more ](https://vorlon.io/saas-security-blog/datamatrix-vorlons-patented-technology) ## Get Proactive Security for Your Agentic Ecosystem Book a Demo [![Vorlon_Logo_Large_White](https://vorlon.io/hs-fs/hubfs/ll-assets/Images/Vorlon_Logo_Large_White.png?width=139&height=33&name=Vorlon_Logo_Large_White.png) ](https://vorlon.io) ## Sign up for industry insights and Vorlon news Start Here - [The Agentic Ecosystem Security Gap](https://vorlon.io/problems-we-solve) - [The Agentic Ecosystem Signal to Action Layer](https://vorlon.io/our-solution) Platform - [Platform](https://vorlon.io/platform) - [AI Agent Runtime Security](https://vorlon.io/ai-runtime-security) - [Total Identity Security](https://vorlon.io/total-identity-security) - [Data-Centric SaaS Security](https://vorlon.io/data-centric-saas-security) - [Compliance Automation](https://vorlon.io/compliance-automation) - [Apps Directory](https://vorlon.io/app-directory) - [SecOps Integrations](https://vorlon.io/integrations) Company - [About](https://vorlon.io/about) - [Careers](https://vorlon.io/careers) - [Press Room](https://vorlon.io/press-room) - [Resources](https://vorlon.io/resources) - [Blog](https://vorlon.io/blog) Let's Connect - Talk to Sales ![soc-type-2](https://vorlon.io/hs-fs/hubfs/ll-assets/Images/soc-type-2.jpg?width=105&height=50&name=soc-type-2.jpg)![aws logo cropped](https://vorlon.io/hs-fs/hubfs/ll-assets/Images/aws%20logo%20cropped.png?width=50&height=50&name=aws%20logo%20cropped.png)![latio innovators on black](https://vorlon.io/hs-fs/hubfs/ll-assets/Images/latio%20innovators%20on%20black.png?width=52&height=50&name=latio%20innovators%20on%20black.png)![2025-CRN-Stellar-Startups](https://vorlon.io/hs-fs/hubfs/Logo/2025-CRN-Stellar-Startups.webp?width=29&height=50&name=2025-CRN-Stellar-Startups.webp)![FS-ISAC-Seal_Affiliate_onblack](https://vorlon.io/hs-fs/hubfs/ll-assets/Images/FS-ISAC-Seal_Affiliate_onblack.png?width=156&height=50&name=FS-ISAC-Seal_Affiliate_onblack.png) © 2026 Vorlon Inc. All rights reserved. - [Terms of Use](https://vorlon.io/terms-of-use) - [Privacy Policy](https://vorlon.io/privacy-policy) - [Sitemap](https://vorlon.io/sitemap) [![ClickCease](https://monitor.clickcease.com/stats/stats.aspx)](https://www.clickcease.com) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Lauren Lee", "url" : "https://vorlon.io/saas-security-blog/author/lauren-lee" }, "dateModified" : "2026-02-06T06:38:16.325Z", "datePublished" : "2024-03-13T16:00:00.000Z", "headline" : "Unpacking the American Express Third-Party Breach", "image" : [ "https://vorlon.io/hubfs/Bite%20Sized%20Breaches%20(y).png" ], "mainEntityOfPage" : { "@id" : "https://vorlon.io/saas-security-blog/unpacking-the-american-express-third-party-breach", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://vorlon.io/hubfs/Logo/Vorlon%20logo_two%20tone%20light.svg" }, "name" : "Vorlon Inc." } } ```