A security failure at a third-party vendor exposed an untold number of American Express card numbers, expiry dates, and other data to persons unknown. “We became aware that a third-party service provider engaged by numerous merchants experienced unauthorized access to its system,”

Source: The Register