Security News > 2021 > January > Hacker posts data of 10,000 American Express accounts for free
A threat actor has posted data of 10,000 American Express credit card holders on a hacker forum for free.
In the same forum post, the actor claims to sell even more data of Mexican banking customers of American Express, Santander, and Banamex.
Data exposes credit card numbers and customers' PII. This week a threat actor leaked data of 10,000 Mexico-based American Express credit cardholders on a forum.
As analyzed by BleepingComputer, the leaked sample data set of 10,000 records exposes full American Express account numbers and customers' personally identifiable information including name, full address, phone numbers, date of birth, gender, etc.
American Express neither denied nor admitted that they had suffered a data breach, but shared that all Amex cardholders are not liable for fraudulent charges.
"However, as a reminder, American Express Card Members are not liable for any fraudulent charges on their accounts. American Express has sophisticated monitoring systems and internal safeguards in place to help detect fraudulent and suspect activity. If we see there is unusual activity which may be fraud, we will take protective actions," American Express told BleepingComputer in a statement.