KrebsonSecurity has the story. There was unauthorized card activity known due to cards that were created by the stolen card data. (this credit card fraud is called “card-present”)
The speculation is that JimmyJohn’s has been breached and at this point we are waiting for JimmyJohn’s investigation.
In the meantime if you want a delicious sandwich – bring ca$h.