Chipotle Breach: All DC Locations Where Data Compromised

Officials with fast-casual chain Chipotle has identified malware that it says was used to steal customer payment data over a span of just over three weeks, and multiple Washington, DC, locations were among those affected by the breach.

In a news release May 26, the company said customer information was compromised between March 24 and April 18. The malware searched for track data, which can include cardholder names in addition to card numbers, expiration dates and internal verification codes. Chipotle said the malware searched from the information from the magnetic stripe of the payment card.

The malware has since been removed, according to Chipotle corporate officials, and no other customer information was stolen. The company provided a list of locations that were affected by the breach on its website, though it is unclear how many customers were affected.

A spokesman for the company told Reuters that the breach hit most of its roughly 2,250 restaurants.

The news of the breach comes over a year after an E.coli outbreak that diminished customer trust in the popular restaurant was declared as having ended. Chipotle disclosed the breach at an investor meeting in April.

These Washington, DC, locations were affected by the breach:

• 625 Monroe Street NE, A8
• 601 F Street NW
• 50 Massachusetts Avenue, Space L037
• 4301 Wisconsin Ave. NW Unit B
• 413 8th Street, SE
• 40 Massachusetts Ave NE
• 3420 Connecticut Ave, NW
• 3255 M Street, NW
• 3113 14th Street NW
• 2600 Connecticut Ave.
• 2338 Wisconsin Ave.
• 2301 Georgia Ave NW, Unit A
• 2300 Washington Place NE, Space 101S
• 2000 Pennsylvania Avenue, Suite 15
• 1837 M Street NW
• 1629 Connecticut Ave. NW
• 1508 14th Street NW, First Floor
• 1045 5th Street NW
• 1010 Vermont Ave NW

Patch file photo

Story by Feroze Dhanoa, Patch staff