Jason’s Deli

Original Release Date: 1/18/2018

Summary

Jason’s Deli, which has over 275 locations in 28 states, released a breach notice regarding a security incident that occurred in a few of their locations affecting over two million customers. The initial investigation into the incident revealed that malicious actors installed RAM-malware onto the company’s point-of-sale terminals on June 8, 2017. According to the notice, the stolen data includes cardholder names, payment card numbers, expiration dates, cardholder verification values (CVVs), and service codes. The notice also contains a list of impacted and potentially impacted stores. 

Recommendations

The NJCCIC recommends patrons who made purchases at impacted or potentially impacted Jason’s Deli locations closely monitor their financial accounts and immediately report any fraudulent activity to their financial institutions.

New Jersey Cybersecurity & Communications Integration Cell

2 Schwarzkopf Dr, Ewing Township, NJ 08628

njccic@cyber.nj.gov

OUR COMMITMENT

The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.

Agency Seals of State of NJ, NJOHSP and NJCCIC

STAY CONNECTED:

View our Privacy Policy here.

View our Site Index here.