Jason’s Deli says customer data exposed in credential stuffing attack