A threat actor has posted data of 10,000 American Express credit card holders on a hacker forum for free.
In the same forum post, the actor claims to sell even more data of Mexican banking customers of American Express, Santander, and Banamex.
Data exposes credit card numbers and customers' PII
This week a threat actor leaked data of 10,000 Mexico-based American Express credit cardholders on a forum.
The finding was brought to light by threat intelligence analyst, Bank Security.
Threat actor posts data of 10,000 American Express card members on hacker forumSource: BleepingComputer
As analyzed by BleepingComputer, the leaked sample data set of 10,000 records exposes full American Express account (credit card) numbers and customers' personally identifiable information (PII) including name, full address, phone numbers, date of birth, gender, etc.
However, BleepingComputer did not see credit card expiration dates, passwords, or overly sensitive financial data in the posted spreadsheet that could enable misuse of the credit cards in fraudulent transactions.
Leaked dataset exposes credit card numbers, customer's name, address, and other PIISource: BleepingComputer
It seems the actor behind the forum post intends to expose this data mainly for marketing spam purposes.
"I do not sell private data such as password, card information, id number. With the data I sell or share, you are only exposed to spam or marketing :)," stated the seller in the same forum thread.
Amex aware and monitoring the situation
BleepingComputer reached out to American Express to verify the authenticity of the leaked information.
American Express neither denied nor admitted that they had suffered a data breach, but shared that all Amex cardholders are ..
Support the originator by clicking the read the rest link below.
