Jimmy John’s Confirms Breach at 216 Stores
Summary: Jimmy John's confirmed that an intruder stole login credentials from its point-of-sale vendor, Signature Systems, and used them to remotely access point-of-sale systems at roughly 216 corporate and franchised stores between June 16 and Sept. 5, 2014. The company said cards swiped at the stores were affected, potentially exposing card numbers and in some cases cardholder names, verification codes and expiration dates, while online-entered information remained secure.
Bottom line: The breach touched about 11 percent of Jimmy John's more than 1,900 franchised locations, and the same pattern had just surfaced at more than 330 Goodwill stores through a different payment vendor, C&K Systems, whose breach persisted for 18 months. The vector was a vendor's remote administration protected by little more than a username and password.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026