Orbitz, part of Expedia, confirms a data security incident was detected on March 1. The breach affected both the partner and consumers platforms between 2016 and 2017. American Express announced its platforms have not been compromised. Orbitz is reaching out to all affected customers and offers credit monitoring and identity protection free of charge for one year. Attackers did not have access to social security numbers (for US customers), passport and travel information and there is no strong evidence that any data was stolen as a result of this incident.”]