Niles Jimmy John’s affected by data breach

Published 12:04 pm Thursday, September 25, 2014

Jimmy John’s informed customers Wednesday that there was a breach in security including the theft of customers’ credit and debit card data at 216 locations, including the Niles sandwich shop at 1260 S. 11th St.

Jimmy John’s leaders said cards impacted appear only to be those swiped at the stores and not cards entered manually or online.

The Niles store was affected by this data breach between July 1 and Aug. 2 of this year, according to Jimmy John’s.

The restaurant chain said in a press release that it discovered the data breach on July 30 and immediately hired a third party forensic expert to assist with an investigation. So far, Jimmy John’s said it appears that customers’ credit and debit card data was compromised after an intruder stole log-in credentials from Jimmy John’s point-of-sale vendor and used these stolen credentials to remotely access the point-of-sale systems at some corporate and franchised locations between June 16 and Sept. 5.

The security compromise has been contained, according to the press release, and customers can use their credit and debit cards securely at Jimmy John’s stores.

The credit and debit card information at issue may include the card number and in some cases the cardholder’s name, verification code, and/or the card’s expiration date. Information entered online, such as customer address, e-mail and password, remains secure.

A full list of the affected stores can be found online at jimmyjohns.com.

Jimmy John’s said it has taken steps to prevent this type of event from occurring in the future, including installing encrypted swipe machines, implementing system enhancements, and reviewing its policies and procedures for its third party vendors.

The sandwich chain is offering identity protection services to impacted customers. To take advantage of these services visit the website jimmyjohns.com or call (855) 398-6442.

Jimmy John’s is encouraging customers to monitor their credit and debit card accounts and notify their bank if they notice any suspicious activity.