Cyber Risks · Krebs on Security

Sandwich Chain Jimmy John’s Investigating Breach Claims

Summary: Multiple U.S. financial institutions told KrebsOnSecurity they are seeing card-present fraud on cards all recently used at Jimmy John's locations, and the chain said it is working with authorities and investigating. The company has more than 1,900 stores in at least 43 states, nearly all franchisee-owned, and multiple stores said they ran point-of-sale systems made by Signature Systems Inc., whose PDQ QSR product is recommended as the standard payment solution for new franchise owners.

What's compelling: Card-present fraud means counterfeit cards were made from stolen data, the same pattern seen in mass breaches at Target, Neiman Marcus, Michaels, P.F. Chang's and others - and with roughly 98 percent of Jimmy John's locations independently operated, a single compromised POS setup can reach customers far beyond one store's own controls.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related