Jimmy John's Data Breach

Purpose

• Initial Breach
• Scope of Information Stolen
• Action Taken
• Changes to SOP

Initial Breach

• 6/14/2014, 50 Stores
• 216 Jimmy John's Locations
• Officially Contained on 09/05/2014

Information Stolen

• Card Swiped at Affected POS Terminals
• Credit/Debit Details
• Customers Remained Uninformed

Customer Notification

• Jimmy John's Informed by July 30, 2014
• Official Press Release was on September 24, 2014
• Customer's Remained Uninformed for 3 Months

Action Taken

• Affected POS Systems were Encrypted
• New Security Measures being Reviewed for Implemantation

Changes to SOP

• Enhanced In-Store Security
• Franchise-owner Notification 
• Employee Notification
• Customer Notification

Conclusion