← Amazon

AmEx credit card numbers exposed on internal network

2017 24.0M records affected Share on X

Data compromised

Credit card numbers, Card numbers, Credit/financial data, Employee data, Internal documents

Technical writeup

Cache of AmEx card numbers left unsecured on internal network for months; broadly available to employees. Audit logs only 90 days; abuse unclear.

Root cause

Unsecured internal storage.

References