Chipotle Breach: DC Locations Included In Data Leak

WASHINGTON, DC — Malware was used to steal customer payment data over a three-week period this spring from Chipotle restaurants across the country, and DC restaurants were among the locations affected.

Customer information was compromised from transactions that occurred between March 24 and April 18, the company said in a news release.

The malware searched for track data, which at times has cardholder name in addition to card number, expiration date and internal verification code. The malware used the magnetic stripe of payment cards to access information, according to a statement from Chipotle.

"It is always advisable to remain vigilant to the possibility of fraud by reviewing your payment card statements for any unauthorized activity," Chipotle said in a statement. "You should immediately report any unauthorized charges to your card issuer because payment card rules generally provide that cardholders are not responsible for unauthorized charges reported in a timely manner." Phone numbers for credit companies are usually on the back of the cards.

Chipotle said that the malware has since been removed, and no other customer information was stolen. The company provided a list of locations that were affected by the breach on its website, though it is unclear how many customers were affected.

Various DC locations were among those possibly hit in the data breach. These include:

• 625 Monroe Street NE, A8
• 601 F STREET NW
• 50 Massachusetts Avenue, Space L037
• 4301 WISCONSIN AVE. NW UNIT B
• 413 8th Street, SE
• 40 Massachusetts Ave NE
• 3420 Connecticut Ave, NW
• 3255 M Street, NW
• 3113 14th Street NW
• 2600 CONNECTICUT AVE
• 2338 Wisconsin Ave
• 2301 Georgia Ave NW, Unit A
• 2300 Washington Place NE, Space 101S
• 2000 Pennsylvania Avenue, Suite 15
• 1837 M STREET NW
• 1629 CONNECTICUT AVE. NW
• 1508 14th Street NW, First Floor
• 1045 5th Street NW
• 1010 Vermont Ave NW, 101

Find all locations affected by the data breach.

If you have any questions, you may contact Chipotle at 888-738-0534 Monday through Friday from 9 a.m. and 9 p.m., or Saturday and Sunday between 9 a.m. and 5 p.m.

News of the breach comes over a year after an E.coli outbreak diminished customer trust in the popular restaurant. Chipotle disclosed the breach at an investor meeting in April.

— By Patch editors Mike Carraggi and Elizabeth Janney

Patch file photo.