CHAMPAIGN, Ill. and HAMPTON ROADS, Va. (AP and WAVY) — Jimmy John’s sandwich chain said Wednesday that it believes customers’ credit card data was stolen from 216 of its shops between June and September.
The Champaign, Illinois-based chain said in a news release that stores in 37 states across the United States were affected. It did not say how many customers are affected.
Jimmy John’s believes someone stole log-in credentials and remotely installed malware on machines used to swipe credit cards. Some customers’ credit card numbers, expiration dates, verification codes and names were stolen between June 16 and Sept. 15, the company said.
Two stores in the Hampton Roads were affected. The Jimmy John’s at 1908 Landstown Centre Way Unit 110 in Virginia Beach had information taken from June 16 to Aug. 13. A second store on 341 High St. in Portsmouth faced breaches the entire month of July.
The privately held company said it discovered the problem on July 30.
Jimmy John’s said it believes its security has been restored by installing encrypted swipe machines and taking other steps.
Jimmy John’s has more than 2,000 locations. Here’s a list of stores affected.
Copyright 2014 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.