Jason’s Deli Data Breach Exposes 344,000 Users in Credential Stuffing Attack

Jason’s Deli experienced a credential-stuffing breach on December 21, 2023 that resulted in unauthorized access to approximately 344,000 customer accounts, exposing usernames, passwords and various personal data (names, DOB, contact info, order history, truncated payment data and reward balances); the company notified affected users, is reviewing security measures and recommends stronger protections such as phishing-resistant MFA and password hygiene.