Jason’s Deli Facing Class Action Over 2023 Data Breach Affecting 344K Customers

New to ClassAction.org? Read our Newswire Disclaimer

Deli Management, Inc., which does business as Jason’s Deli, faces a proposed class action over a security incident that compromised the personal information of more than 344,000 customers last year.

Did you receive a data breach letter from Jason’s Deli? Let us know here.

The 29-page lawsuit attributes the data breach—which was reportedly detected on December 21, 2023—to the fast food chain’s alleged failure to implement adequate cybersecurity measures. According to the case, Jason’s Deli disregarded the privacy rights of its customers by “intentionally, willfully, recklessly, or negligently” failing to take available steps to protect their private data from unauthorized disclosure.

The complaint says the defendant waited until January 19, 2024 to reveal the incident to all potentially affected customers, which includes Deli Dollars rewards program members and Jason’s Deli online accountholders.

Per the notice letter, unauthorized parties were able to access these customers’ accounts using recycled login credentials that were “most likely” stolen from “other data breaches or other sources not involving Jason’s Deli.”

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

As a result, the letter says, hackers have gotten their hands on private information stored in these accounts, including customers’ names, addresses (including all saved delivery addresses), phone numbers, birthdays, preferred Jason’s Deli locations, order history, contact lists, house account numbers, Deli Dollars points, available redeemable amounts and rewards, and the last four digits of gift card or credit card numbers.

The filing stresses that Jason’s Deli’s “willful failure” to protect sensitive information entrusted to it has exposed data breach victims to a “substantially increased” risk of identity theft or fraud.

“[The defendant’s] negligence in safeguarding [the plaintiff’s] and class members’ [personally identifiable information] and financial information is exacerbated by repeated warnings and alerts directed to protecting and securing sensitive data, as evidenced by the trending data breach attacks in recent years,” the case says.

The lawsuit looks to represent anyone in the United States whose personal and/or financial information was exposed to unauthorized third parties as a result of the data breach reportedly discovered by Jason’s Deli on December 21, 2023.

Did you receive a data breach letter from Jason’s Deli? Let us know here.