We’re starting to think Amex doesn’t take this whole “data security” thing very seriously. First they confused a customer, and us, a few months ago with their random confirmation phone call, where they demanded a customer turn over bank account information over the phone without giving him a way to verify they were really Amex. Now a reader says the company has “for years” been sending him someone else’s account info via email, including the customer’s name and the last 5 digits of his account number. J.R. writes, “Seriously, I’ve seen better security on a video game forum.”