Subway

Subway is a fast‑service restaurant brand best known for its made‑to‑order submarine sandwiches, salads, wraps and breakfast items that customers can customise with a choice of breads, proteins, vegetables and sauces. The company operates primarily through a franchise model, under which independent owners run individual outlets while adhering to corporate standards for menu, preparation and service. In the United Kingdom, Subway trades under the name Subway UK and its headquarters are located in the country, overseeing the UK market and supporting franchisees there. The brand’s core offering centres on providing a quick, personalized meal option that appeals to consumers seeking both convenience and the ability to tailor nutritional content to their preferences. Subway’s menu also includes side items such as cookies, chips and beverages, and it periodically introduces limited‑time promotions to keep the offering fresh. The business serves a broad market ranging from commuters and students to families and office workers, positioning itself as a convenient alternative to traditional fast‑food outlets.

A distinguishing characteristic of Subway is its emphasis on fresh ingredients and the ability for customers to watch their sandwich being assembled, a feature that differentiates it from many pre‑made fast‑food competitors. The franchise‑driven structure enables rapid geographic expansion, allowing the brand to maintain a presence in numerous towns and cities across the UK and in many other countries worldwide. In addition to its operational model, Subway has engaged in various health‑focused marketing campaigns that highlight lower‑calorie options and fresh vegetable choices. On 11 December 2020, the company’s UK marketing system was compromised, resulting in the distribution of phishing emails that contained malicious Excel documents designed to deliver TrickBot malware; the emails used recipients’ first names and dedicated Subway addresses to appear legitimate. The malware could facilitate credential theft and network propagation, although Subway confirmed that no guest accounts or financial data were exposed and isolated the affected server under its crisis‑response procedures, notifying affected customers about the potential disclosure of their first and last names. This incident underscored the importance of securing non‑core IT assets such as marketing platforms, even for organisations primarily known for food service.