Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
American Express has notified some current and former cardmembers about card information that may have been exposed in third-party, merchant-related, or law-enforcement-related incidents. The documented notices do not establish one new, company-wide 2026 breach of American Express-owned systems. Your first step is to identify the notice date, breach number, and account referenced in your letter.
What the American Express notices mean
“American Express data breach” can describe more than one incident. Massachusetts records show several separate Amex-related filings, including breach numbers 2024-043, 2024-059, 2024-372, 2024-374, and 2024-376. You should not assume that every notice refers to the same event. See the Massachusetts January 2024 filings and February 2024 filings.
The best-documented notice, assigned Massachusetts breach number 2024-059, said that a third-party service provider used by numerous merchants experienced unauthorized access. American Express said some current or previously issued card-account information may have been involved, while its American Express-owned or controlled systems were not compromised. Read the Massachusetts notice.
Another notice, assigned number 2024-376, concerned law-enforcement recovery of illegally obtained information. It referred to some cancelled American Express account information and said the exact information recovered was not known at the time. That notice also said Amex systems were not compromised. Read the 2024-376 notice.
#1 Best Overall
- SECURE YOUR WALLET FROM e-PICKPOCKETING: Prevent potential identity and financial theft through your contactless cards. Don’t become a victim e-theft in our growing contactless society. This is the simplest and most effective prevention solution! Block all RFID and NFC signal to secure your details and have peace of mind.
- JAMMING CHIP: An antenna and jamming chip makes up the main components of the card. The antenna will sense incoming radio waves and draw power for the chip to create a jamming signal. Lifetime usage as the card does not require battery.
- BROAD WORKING DISTANCE: A large working distance of 2.4” provides complete protection for your whole wallet. Cards 1.2” either side of the card will be fully secure from e-pickpocketing.
- ULTRA-THIN & COMPACT: At the size of a standard credit card and at only 0.03” thick, the card will fit into any wallet, purse or card case. Keep your wallet compact with no added bulk from this card. Best for travel, business, and everyday use.
- TEST THE CARD: Test the card is working at your local supermarket. At the self-service checkout machines, combine the card and a contactless card on the payment reader. Payment with the contactless card will be blocked and an error message should occur on the reader.
As of August 18, 2026, the authoritative material identified for this article does not establish a single new nationwide 2026 intrusion into American Express’s own network matching the headline. If you received a letter, the letter—not a generalized news headline—determines which incident applies to you.
How to identify your specific notice
Check the document for:
- The notice date.
- A state filing or breach-assignment number.
- The last four digits or other identifier for the affected account.
- Whether the account is current, previously issued, or cancelled.
- References to a third-party service provider, merchant, processor, or law-enforcement recovery.
- The specific categories of information that may have been involved.
- The customer-service number and instructions supplied by American Express.
A letter about one account does not necessarily mean that all of your Amex accounts were involved. Conversely, receiving multiple letters may mean that more than one account or incident is being addressed.
What information may have been exposed?
The 2024-059 notice identified the following information as potentially involved:
| Information | What the notice supports | Primary risk |
|---|---|---|
| Amex card-account number | Identified as potentially involved | Unauthorized card transactions and targeted phishing |
| Cardmember name | Identified as potentially involved | More convincing impersonation attempts |
| Expiration date or other card information | Identified as potentially involved | Payment fraud |
| Security code | Not established by the identified notice | Do not assume it was exposed |
| Social Security number | Not established by the identified notice | Do not claim broader identity exposure without evidence |
| Password or one-time code | Not established by the identified notice | Do not disclose these to callers or messages |
| Bank-account information | Not established by the identified notice | Do not assume it was involved |
The wording matters: the notice says information may have been compromised. That does not prove that every listed data element was taken or that your account has already been misused.
The 2024-376 notice was more limited and less certain. It said law enforcement recovered illegally obtained information that may have included information from cancelled Amex accounts, but the precise information recovered was unknown at that time.
Was American Express itself breached?
For the two notices described above, American Express said no. The notices attributed the relevant activity to a third-party or merchant-related environment, or to information recovered by law enforcement, rather than to American Express-owned or controlled systems.
Rank #2
- Advanced RFID secure sleeve designed to protect credit cards, money cards, identification cards from electronic fraud or theft; RFID shields are a superb debit card protector, RFID blocking to provide superior travel security.
- Made from special RFID blocking material, this credit cards holder is thin and lightweight. certified secure sleeves for credit cards protect against scanning of digital and electronic chips by thieves, tear- and water-resistant
- RFID sleeve with electronic armor is the identity theft protection for your bank cards. this credit card and ID holder prevents electronic access to your cards. valuable credit card protection, an ID card protector. RFID to block scanning and skimming
- Credit card protection sleeve designed with color coding system to find each card easily and quickly. RFID credit card holder have different colors for superior convenience. the special high quality rigid aluminum foil coating of these tiny slim RFID blocking wallets ensures you will never be a victim of high-tech crime
- Includes 12x RFID credit card protector sleeves for ultimate fraud prevention and travel safety
That distinction does not eliminate the risk. Merchants, payment processors, service providers, and other organizations handle transaction data. A card issuer may notify customers when card information is exposed elsewhere. The California Department of Justice breach database explains this general pattern: a bank or card issuer may notify customers about a card-number compromise that occurred at a merchant.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Secondary reporting described the 2024 incident as involving a merchant processor. CBS News reported that American Express did not disclose the total number of potentially affected people or the incident’s geographic reach. See the CBS News report.
How many customers were affected?
There is no verified nationwide total in the materials identified for this article. Do not treat state-specific figures as a national count.
The Massachusetts 2024 Data Breach Notification Report lists separate Amex-related incidents with counts including:
- 24 Massachusetts residents for breach number 2024-372.
- 4 Massachusetts residents for breach number 2024-374.
- 1 Massachusetts resident for breach number 2024-376.
Those figures represent Massachusetts residents tied to particular filings. They do not show how many Amex customers were affected nationwide or how many people were involved in the 2024-059 incident.
Recommended Free Tools
What affected cardmembers should do now
1. Verify the notice independently
Do not click links in an unexpected email or call a phone number supplied by an unsolicited caller. Open the American Express app, type the official website address into your browser, or call the number on the back of your card. Ask whether the notice matches the account identifier and incident described in the letter.
Rank #3
- Stop Digital Theft Instantly: Protect your credit cards, debit cards, passports, and IDs with Cardian’s advanced smart NFC and RFID card blocking technology—keeping hackers and skimmers out of your wallet
You can also compare the notice with American Express’s Security Center. Use the customer-service number printed in your own verified notice or on your card rather than relying on a number copied from an unrelated article.
2. Review pending and posted transactions
Check recent transactions and, where practical, older activity connected with the affected account. Look for:
- Small unfamiliar charges that may be used to test a card.
- Unrecognized merchants or online transactions.
- Unexpected recurring charges.
- Transactions involving a card that was supposedly cancelled.
No suspicious activity is good news, but it does not make the notice irrelevant. Continue monitoring for a period of time and follow any instructions from Amex.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall3. Report unauthorized activity immediately
Use the Amex app, official website, or number on the card. Save the letter, emails, screenshots, transaction details, and dispute-confirmation numbers. Do not provide an unsolicited caller with a one-time passcode while “verifying” a transaction.
4. Follow replacement-card instructions
If American Express recommends replacing the card, follow that instruction. Do not close an account solely because you read a generic breach article before confirming that your specific account was involved.
After a replacement, update legitimate recurring merchants and remove the old card from digital wallets or merchant accounts as instructed. A cancelled card can still appear in historical or recovered records; cancellation prevents future use of that card but cannot erase information previously exposed.
Rank #4
- RFID Protection: An electromagnetically opaque layer helps block unauthorized scans, protecting credit card, debit card, and passport information from nearby readers; This RFID blocking card helps prevent digital skimming by shielding your wallet from electronic theft
- Threats Stay Outside: Digital pickpockets use hidden readers to skim contactless cards in crowds, transit and checkout lines; This credit card protector works as an RFID blocker the moment it's placed in your purse or wallet, stopping electronic theft before it occurs
- Invisible Yet Active: Ultra-thin and sized to fit any wallet slot, this rfid blocking card adds no bulk; Invisible protection helps shield your debit cards and IDs from electronic skimming without changing the way you carry your wallet
- One Card Protects All: Forget slipping every card into a separate RFID sleeve, just one RFID blocking card protects every contactless card, passport, and license all at once; Carry it in a purse, travel pouch or cardholder and stay shielded at airports, transit hubs and during daily commutes
- Drop and Defend: Keep the RFID blocking card in your wallet or travel bag, or save it as a backup; Simply insert it alongside your credit and debit cards for immediate protection against identity theft — no charging, no setup
5. Turn on account alerts
Enable available Amex notifications for purchases, online transactions, and other account activity. Confirm that your phone number, email address, and notification preferences are current.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Do you need a credit freeze?
A card-number exposure is primarily a payment-fraud problem. A credit freeze is not automatically required in every case because a card number is different from a Social Security number.
Consider reviewing your credit reports and using a fraud alert or security freeze if your notice names broader identity information, you see signs of identity theft, or you are concerned about unauthorized credit applications. The Federal Trade Commission explains these options in its data-breach guidance.
- Transaction monitoring: Helps identify misuse of the card.
- Credit monitoring: Alerts you to certain changes but does not prevent fraud.
- Fraud alert: Asks prospective creditors to take additional steps to verify your identity.
- Credit freeze: Restricts access to your credit file until you temporarily lift or remove the freeze.
For free reports, use AnnualCreditReport.com. Do not buy a paid identity-monitoring service merely because you received a notice involving a card number. Such services may be more relevant when a notice names Social Security numbers, driver’s-license information, bank details, identity documents, or account credentials, or when you want centralized restoration assistance.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Watch for follow-up phishing
A real breach notice can be followed by fake calls, emails, and text messages. Scammers may know your name and the last four digits of an account, but that does not prove they represent Amex.
Treat a request for any of the following as a warning sign:
Best Value
- ONE CARD PROTECTS YOUR WHOLE WALLET: Drop a single KF-Premium card into your wallet, purse, or card holder and every card sitting near it is shielded from contactless RFID and NFC scans, so you do not need a separate sleeve on each card. This 2-pack covers a second wallet, a passport holder, or a family member.
- ULTRA THIN AT 0.9MM, BARELY THERE: Each blocking card is only 0.9mm thick, about as slim as one of your bank cards, so it slides into any wallet slot without the bulk of foil sleeves or switching to a new wallet. Slim enough that you forget it is working.
- STOPS FRAUD BEFORE IT STARTS: The armoured shield design sends out an interfering counter-signal that blocks unauthorized RFID and NFC readers from skimming your debit cards, credit cards, and IDs. It guards against contactless payment fraud, identity theft, and digital pickpocketing in crowds, on transit, and while you travel.
- WORKS THE MOMENT IT IS IN YOUR WALLET: No batteries, no charging, no app, and nothing to switch on. Protection is automatic and continuous for the life of the card, and the durable, high-quality build holds up to daily wear in a back pocket or bag.
- A PRACTICAL GIFT THEY WILL ACTUALLY USE: The sleek black finish gives it a premium look that suits travelers, students, parents, and anyone who carries contactless cards. Boxed as a 2-pack, it works for birthdays, holidays, or a stocking filler that quietly protects the people you care about.
- Your full card number or security code.
- An online-account password.
- A one-time authentication code.
- Your Social Security number when it is not required through a verified channel.
- Remote access to your phone or computer.
- Payment for “account protection” or fraud resolution.
Hang up or ignore the message, then contact American Express through the number on the card or a verified official channel. Never read a one-time code to an unsolicited caller.
What remains unknown
The publicly available filings identified here do not establish:
- The total number of affected American Express customers nationwide.
- The full geographic scope of the 2024-059 incident.
- The identity of the merchant, processor, or service provider involved, where it was not disclosed.
- Whether every data category listed as potentially involved was actually accessed.
- Whether a particular notice applies to cardmembers outside the state where the filing was made.
Do not infer a national customer count from a Massachusetts filing, or treat a 2024 notice as proof of a new 2026 Amex network breach.
What about compensation or a class action?
The sources identified for these notices do not establish a specific settlement, compensation program, or class action to which every recipient is entitled. Be skeptical of messages promising automatic payment or demanding a fee to file a claim.
Before relying on a settlement claim, verify the court docket, settlement administrator, eligibility dates, claim deadline, official settlement website, and whether the case concerns the same incident described in your notice.
Bottom line for cardmembers
These notices should be treated as a prompt to verify your account and watch for fraud—not as proof that American Express’s internal network was hacked. Identify the exact notice, confirm the affected account through an official channel, review transactions, report anything unauthorized, enable alerts, and consider credit-file protections only if the exposed information or your circumstances justify them.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors
