News and Headlines

Actions

Chipotle advises customers that their credit card information may have been stolen

Customers who visited in March and April at risk
Posted

Chipotle Mexican Grill announced Friday that it had identified and removed malware installed by hackers that lifted customer credit card data earlier this year.

Reports indicate that “most” Chipotle locations were affected by the hack, and restaurants were most vulnerable to the attack between March 24 and April 18.

Chipotle previously reported news of the hack on April 25 during a business meeting. On Friday, the restaurant said the malware had hacked point-of-sale devices at its stores, and that customers’ name, card number, expiration date, and internal verification code could have been lifted by hackers.

CHIPOTLE | Chipotle, Jimmy Johns restaurants near IUPUI damaged in fire | MAP: How safe is your local Chipotle? | CDC says Chipotle E. coli outbreak appears to be over | Man sues Chipotle after sign falls onto his vehicle

Locally, the following central Indiana locations and dates were affected by the hack:

 

Indianapolis  
8812 US 31, Suite D 3/26/2017–4/18/2017
8702 Keystone Crossing, Space VC03 3/26/2017–4/18/2017
601 Oscar Robertson Blvd. 3/24/2017–4/9/2017
6 East Washington, Ste 100 3/27/2017–4/18/2017
5320 East 82nd Street, 107 3/27/2017–4/8/2017
4625 East 96th Street 3/25/2017–4/18/2017
3340 W 86th Street 3/25/2017–4/18/2017
1560 E. 86th Street Suite C 3/25/2017–4/18/2017
1002 Broad Ripple Avenue 3/26/2017–4/18/2017
   
Bloomington  
420 E Kirkwood Ave 3/25/2017–4/18/2017
2894 East Third Street F18B 4/3/2017–4/18/2017
   
Carmel  
2420 East 146th Street 3/25/2017–4/18/2017
12697 North Pennsylvania Street, Suite 100 3/26/2017–4/18/2017
   
Kokomo  
1201 South Reed Road, Suite B 3/26/2017–4/18/2017
   
Plainfield  
350 S. Perry Road, 267 4/3/2017–4/18/2017
   
Speedway  
6321 Crawfordsville Road, F 4/11/2017–4/18/2017

Those who visited the restaurant between March 24 and April 18 can visit Chipotle’s website to see if the store they visited was affected by the hack. According to the restaurant’s website, Chipotle is also advising customers to report any unauthorized charges to their card card issuers.

"There is no indication that other customer information was affected," Chipotle said on its website.

Customers can also call 888-738-0534 Monday through Friday between the hours of 9:00 a.m. and 9:00 p.m. EDT with any questions regarding the incident. 

Alex Hider is a writer for the E.W. Scripps National Desk. Follow him on Twitter @alexhider.