An investigation into the Chipotle security incident announced April 25 confirmed a timeline of attack and type of customer information exposed.

Dark Reading Staff, Dark Reading

May 30, 2017

1 Min Read

Chipotle has published an update following a security incident announced April 25. It has confirmed malware was used to obtain payment card data from point-of-sale (POS) devices at certain outlets between March 24, 2017 and April 18, 2017.

The Mexican chain restaurant says the malware read payment cards' magnetic stripes as they were routed through POS devices. Malware was designed to search for track data on each card; this includes the card number, expiration date, internal verification code, and sometimes the cardholder's name. There is no sign other customer data was affected in the attack.

Not all restaurants were involved in the breach, and the timeframes of attack vary by location. Chipotle will continue to work with law enforcement and payment card networks so the banks issuing cards can increase monitoring.

Read more details and check affected locations here.

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights