If you are a business owner who has your business amex linked to your personal amex cards with membership rewards be aware that a secondary card holder such as an employee can view the following private information online without your permission or knowledge:

1.View all of your personal amex cards linked to membership rewards and view partial act numbers and type of amex card product.

2.View all of your spending on your personal cards and business cards that earn MR. Including how much on each card by seeing how much you earned in membership reward points each month on each amex product.

3.View what you have spent or redeemed your membership reward points on.

4.View your frequent flyer numbers for any airline you have linked

5.View your frequent guest numbers for hotels you have linked.

All your employee has to do to get the above information is register the secondary card online. This does not require employers permission. The employee then clicks on the Membership Reward Link and can view business owners personal and business information. The actual charge information of the primary or other secondary card holders will not be disclosed but obviously it is very easy to deduct that $1=1MR point. With Frequent flyer/guest numbers other information can easily be obtained.

IMHO Amex needs to fix this immediately and disclose customer privacy breach