Chipotle Mexican Grill announced Friday that it had identified and removed malware installed by hackers that lifted customer credit card data earlier this year.
Reports indicate that “most” Chipotle locations were affected by the hack, and restaurants were most vulnerable to the attack between March 24 and April 18.
Chipotle previously reported news of the hack on April 25 during a business meeting. On Friday, the restaurant said the malware had hacked point-of-sale devices at its stores, and that customers’ name, card number, expiration date, and internal verification code could have been lifted by hackers.
CHIPOTLE | Chipotle, Jimmy Johns restaurants near IUPUI damaged in fire | MAP: How safe is your local Chipotle? | CDC says Chipotle E. coli outbreak appears to be over | Man sues Chipotle after sign falls onto his vehicle
Locally, the following central Indiana locations and dates were affected by the hack:
Indianapolis | |
8812 US 31, Suite D | 3/26/2017–4/18/2017 |
8702 Keystone Crossing, Space VC03 | 3/26/2017–4/18/2017 |
601 Oscar Robertson Blvd. | 3/24/2017–4/9/2017 |
6 East Washington, Ste 100 | 3/27/2017–4/18/2017 |
5320 East 82nd Street, 107 | 3/27/2017–4/8/2017 |
4625 East 96th Street | 3/25/2017–4/18/2017 |
3340 W 86th Street | 3/25/2017–4/18/2017 |
1560 E. 86th Street Suite C | 3/25/2017–4/18/2017 |
1002 Broad Ripple Avenue | 3/26/2017–4/18/2017 |
Bloomington | |
420 E Kirkwood Ave | 3/25/2017–4/18/2017 |
2894 East Third Street F18B | 4/3/2017–4/18/2017 |
Carmel | |
2420 East 146th Street | 3/25/2017–4/18/2017 |
12697 North Pennsylvania Street, Suite 100 | 3/26/2017–4/18/2017 |
Kokomo | |
1201 South Reed Road, Suite B | 3/26/2017–4/18/2017 |
Plainfield | |
350 S. Perry Road, 267 | 4/3/2017–4/18/2017 |
Speedway | |
6321 Crawfordsville Road, F | 4/11/2017–4/18/2017 |
Those who visited the restaurant between March 24 and April 18 can visit Chipotle’s website to see if the store they visited was affected by the hack. According to the restaurant’s website, Chipotle is also advising customers to report any unauthorized charges to their card card issuers.
"There is no indication that other customer information was affected," Chipotle said on its website.
Customers can also call 888-738-0534 Monday through Friday between the hours of 9:00 a.m. and 9:00 p.m. EDT with any questions regarding the incident.
Alex Hider is a writer for the E.W. Scripps National Desk. Follow him on Twitter @alexhider.