Given the amount of recent breaches I doubt that they would be able to prove that any one case of fraudulent activity was the fault of BA, however likely it may be.

I think that Amex will just have to suck it up.