Jimmy John's

Jimmy John's Franchises LLC notified the NH AG of a security incident where an intruder stole credentials from POS vendor Signature Systems, Inc. to access POS systems between June 16 and Sept 5, 2014. Incident discovered July 30, 2014. ~216 stores affected; card data (number, name, exp date) compromised. No NH locations affected. Contained; forensic experts hired; credit monitoring offered.

Jimmy John's Franchises LLC notified customers of a security incident involving credit and debit card data at approximately 216 corporate and franchised locations. An intruder stole login credentials from Jimmy John's point-of-sale vendor and used them to remotely access point-of-sale systems between June 16, 2014, and September 5, 2014. The company learned of the incident on July 30, 2014. Affected data may include card numbers, cardholder names, verification codes, and expiration dates. The incident has been contained, and the company is offering identity protection services.