Jason's Deli: Difference between revisions
Added 1 more incident |
→Credential surfing attack (2024): forgot to add 2024 |
||
| Line 25: | Line 25: | ||
===Credential surfing attack (''2024'')=== | ===Credential surfing attack (''2024'')=== | ||
On 21 December 2023, Jason's Deli discovered unknown hackers had obtained account login credentials using previous data breaches that contained a users name, address, phone number, birthday, preferred Jason's locations, Deli Dollar points, [[wikipedia:PAN_truncation|truncated credit card and gift card numbers]].<ref name=":0">{{Cite web |last=Zurier |first=Steve |date=24 January 2024 |title=Over 340,000 Jason’s Deli customers potentially impacted in credential-stuffing attack |url=https://www.scworld.com/news/over-340000-jasons-deli-customers-potentially-impacted-in-credential-stuffing-attack |url-status=live |access-date=3 May 2026 |website=SCworld}}</ref><ref name=":1">{{Cite web |last=Langley |first=Mitchell |date=24 January 2024 |title=Jason’s Deli Breach Exposes Data of Over 350K Users in Credential Stuffing Attack |url=https://dailysecurityreview.com/security-spotlight/jasons-deli-breach/ |url-status=live |access-date=3 May 2026 |website=Daily Security Review}}</ref> The company would sent a notice letter to affected users on 19 January, <ref>{{Cite web |date=2 March 2026 |title=Notice of Data Breach |url=https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/Jason%27s%20Deli-%20Consumer%20Notice.pdf |url-status=live |archive-url=https://web.archive.org/web/20240202173816/https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/Jason's%20Deli-%20Consumer%20Notice.pdf |archive-date=2 February 2024 |access-date=2 May 2026 |website=consumer.sc.gov}}</ref>with the Office of the Maine Attorney General declaring approximately 344,000 people have been affected.<ref name=":0" /><ref name=":1" /> Five days later, Jason's Deli was faced a class action lawsuit over its failure to safeguard and secure users personal information, however it was voluntarily dismissed by plaintiff Kristen Walker on 19 March.<ref>{{Cite web |last=Mehorter |first=Kelly |date=31 January 2024 |title=Jason’s Deli Facing Class Action Over 2023 Data Breach Affecting 344K Customers |url=https://www.classaction.org/news/jasons-deli-facing-class-action-over-2023-data-breach-affecting-344k-customers |url-status=live |access-date=3 May 2026 |website=ClassAction}}</ref><ref>{{Cite web |date=1 May 2026 |title=Walker v. Deli Management, Inc. d/b/a Jason's Deli |url=https://www.pacermonitor.com/public/case/52105805/Walker_v_Deli_Management,_Inc_dba_Jasons_Deli |url-status=live |access-date=3 May 2026 |website=Pacermonitor}}</ref> | On 21 December 2023, Jason's Deli discovered unknown hackers had obtained account login credentials using previous data breaches that contained a users name, address, phone number, birthday, preferred Jason's locations, Deli Dollar points, [[wikipedia:PAN_truncation|truncated credit card and gift card numbers]].<ref name=":0">{{Cite web |last=Zurier |first=Steve |date=24 January 2024 |title=Over 340,000 Jason’s Deli customers potentially impacted in credential-stuffing attack |url=https://www.scworld.com/news/over-340000-jasons-deli-customers-potentially-impacted-in-credential-stuffing-attack |url-status=live |access-date=3 May 2026 |website=SCworld}}</ref><ref name=":1">{{Cite web |last=Langley |first=Mitchell |date=24 January 2024 |title=Jason’s Deli Breach Exposes Data of Over 350K Users in Credential Stuffing Attack |url=https://dailysecurityreview.com/security-spotlight/jasons-deli-breach/ |url-status=live |access-date=3 May 2026 |website=Daily Security Review}}</ref> The company would sent a notice letter to affected users on 19 January 2024, <ref>{{Cite web |date=2 March 2026 |title=Notice of Data Breach |url=https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/Jason%27s%20Deli-%20Consumer%20Notice.pdf |url-status=live |archive-url=https://web.archive.org/web/20240202173816/https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/Jason's%20Deli-%20Consumer%20Notice.pdf |archive-date=2 February 2024 |access-date=2 May 2026 |website=consumer.sc.gov}}</ref>with the Office of the Maine Attorney General declaring approximately 344,000 people have been affected.<ref name=":0" /><ref name=":1" /> Five days later, Jason's Deli was faced a class action lawsuit over its failure to safeguard and secure users personal information, however it was voluntarily dismissed by plaintiff Kristen Walker on 19 March.<ref>{{Cite web |last=Mehorter |first=Kelly |date=31 January 2024 |title=Jason’s Deli Facing Class Action Over 2023 Data Breach Affecting 344K Customers |url=https://www.classaction.org/news/jasons-deli-facing-class-action-over-2023-data-breach-affecting-344k-customers |url-status=live |access-date=3 May 2026 |website=ClassAction}}</ref><ref>{{Cite web |date=1 May 2026 |title=Walker v. Deli Management, Inc. d/b/a Jason's Deli |url=https://www.pacermonitor.com/public/case/52105805/Walker_v_Deli_Management,_Inc_dba_Jasons_Deli |url-status=live |access-date=3 May 2026 |website=Pacermonitor}}</ref> | ||
==See also== | ==See also== | ||