Jimmy John's

Jimmy John's Franchises LLC reported a security incident where an intruder stole log-in credentials from a point-of-sale vendor. The attacker used these credentials to remotely access POS systems at approximately 216 corporate and franchised locations between June 16, 2014, and September 5, 2014. Compromised data included credit/debit card numbers, cardholder names, verification codes, and expiration dates. The incident was contained, and the company hired forensic experts and offered identity protection services.