Signature Systems Breach Expands
Summary: Signature Systems Inc., the point-of-sale vendor behind a card breach at 216 Jimmy John's locations, said the same attack also compromised nearly 100 other independent restaurants that use its products. Hackers obtained a username and password Signature Systems used to remotely administer POS systems and installed malware that captured cardholder name, card number, expiration date, and verification code from the magnetic stripe, with the Jimmy John's intrusion running from June 16 to Sept. 5, 2014.
Why it matters: Signature's PDQ POS was not approved by the PCI Security Standards Council for new installations after Oct. 28, 2013, and 13 of the 216 affected Jimmy John's stores opened after that date, leaving those locations exposed to fines and other penalties.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026