Twelve Jimmy John's locations in Indiana, including two in Bloomington and one in Columbus, are affected by a security data breach involving credit and debit card data.
The sandwich shop says 216 locations across the United Stateswere involved in the breach.
In a statement, Jimmy John's says an investigation is ongoing and has uncovered that the data was compromised after credentials to log-in to the system were stolen and used remotely from June 16 to September 5.
Jimmy John's says the data breach has been secured and steps have been taken to prevent a similar problem in the future.