Possible Data Breach At Jason's Deli Could Affect Some Customers

VERNON HILLS, IL -- If you've dined recently at Jason's Deli, you may want to check your bank statement. The restaurant chain announced a possible data breach that may have resulted in customer's credit card information being stolen. The data breach is believed to have occurred last month.

The Beaumont, TX-based disclosed details on Tuesday. There are some 226 Jason's Deli restaurants across 28 states. The company has 11 restaurants in Illinois, including Oak Lawn, Park Ridge, Vernon Hills, Oak Brook, Naperville, Schaumburg, and locations in the South Loop and at 195 N. Dearborn. There are also locations in East Peoria, Rockford and Normal.

The Jason's Deli location in Vernon Hills is at 545 Lakeview Parkway.

Company officials said: "On Friday, Dec. 22, 2017, our company was notified by payment processors – the organizations that manage the electronic connections between Jason's Deli locations and payment card issuers – that MasterCard security personnel had informed it that a large quantity of payment card information had appeared for sale on the "dark web," and that an analysis of the data indicated that at least a portion of the data may have come from various Jason's Deli locations."

Officials added they are working with law enforcement officials and data security experts to determine details on the breach, including whether their cash registers were hacked.

"The investigation is in its early stages and, as is typical in such situations, we expect it will take some time to determine exactly what happened," the statement reads. "Jason's Deli will provide as much information as possible as the inquiry progresses, bearing in mind that security and law enforcement considerations may limit the amount of detail we can provide."

"Jason's Deli recognizes that the security of credit and debit card transactions is of the utmost importance to our customers," the statement continues. "We have, over the years, continually reviewed and periodically strengthened our security systems, as have other retailers, to meet the constant challenge of sophisticated criminal activity. We will continue that process, and will carefully consider whatever further changes may be appropriate after a thorough forensic review of this event and our payment security systems."

Customers with questions can call (409) 838-1976 or email customer.service@jasonsdeli.com. In its advisory on the breach, Jason's Deli officials included a FAQ section in keeping customers apprised:

• When did the breach occur?

"We were notified on Friday, December 22, 2017 of a possible breach of payment card information. We are investigating whether a breach occurred and, if so, its scope and duration."

• Do you know when it began? Ended?

"We are currently investigating whether a breach in fact occurred and, if so, its scope and duration. We have engaged leading experts in forensics and cyber security, and are working with law enforcement."

• How many customers were affected?

"The batch of card numbers reported to have appeared for sale on the dark web likely included information stolen from multiple retailers. The forensic analysis is attempting to determine which, if any, are traceable to Jason's Deli and how many of our customers may have been affected."

• How many Jason's Deli locations appear to be involved?

"The forensic analysis is working to determine this. Preliminary information indicates some but not all locations."

• Have you received any reports of improper payment card activity or identity theft resulting from the breach?

"The privacy and security of our customers' financial information is of the utmost importance to us. We have not received any such reports and will be monitoring the situation closely. We encourage customers and financial institutions to contact us with any such information."

• What should customers do who are concerned their information may have been included?

"Customers should monitor their payment card accounts carefully, and if they find any suspicious activity should immediately contact their payment card issuer. In addition, customers or financial institutions with any questions should contact us at customer.service@jasonsdeli.com or 409-838-1976."

• Will you be making more information available?

"We will make as much information available as quickly as we can through our website and on social media, though please understand that security and law enforcement considerations may limit the amount of detail we can provide as the inquiry progresses."

By Lorraine Swanson, Patch Staff

Patch Editor Tony Cantu contributed to this report.

~ Image via Shutterstock