It was all very 'hush hush' as usual. Even those internal to one company weren't even apprised the data breach, even thirty days after it happened. The PR machine of American Express had successfully stifled the news from many major media outlets. In conjunction with the Royal Bank of Scotland and NatWest, personal data of a million customers was on a hard drive that ended up on eBay.

More reports with details can be found:
http://www.google.com with keywords: "american express" ebay breach