Thursday, September 25, 2014

Jimmy John's Confirms Data Breach, Affected 216 Restaurants

Potentially exposed information includes card numbers and, in some cases, the cardholder's name, verification code and/or the card's expiration date. Information entered online, such as customer address, e-mail and password, remains secure, the company says. The Champaign, Ill.-based restaurant chain, which has more than 2,000 locations, did not reveal how many cards were potentially impacted.

Although its investigation is ongoing, the company says it appears that customers' payment card data was compromised after an intruder stole log-in credentials from its "point-of-sale vendor" and used the credentials to remotely access the point-of-sale systems at some corporate and franchised locations between June 16 and Sept. 5 and install malware.

No comments:

Post a Comment