Jason’s Deli says customer data exposed in credential stuffing attack

Jason's Deli notified customers that on December 21, 2023 an unauthorized party used credentials obtained from other breaches to perform credential stuffing against its online accounts; the company detected the attempts but cannot determine how many accounts were accessed. Potentially impacted data for members may include full names, addresses, phone numbers, birthdays, preferred locations, reward balances and truncated card/gift card numbers; a Maine AG filing lists 344,034 potentially affected customers and the company is issuing password reset prompts and restoring unauthorized Deli Dollar usage where applicable.