American Express is alerting customers of a data breach through a third-party service provider affecting credit card details. The breach, external to American Express systems, compromised card numbers, names, and expiration dates. Customers are advised to monitor their accounts for fraud and use the American Express Mobile app for alerts. The incident highlights the need for stringent access controls and service provider accountability in data security.