Hackers may have accessed account numbers, expiration dates and names in breach of merchant processor, AmEx says.