All N.J. Chipotle Restaurants Impacted By Data Breach

By Feroze Dhanoa and Kara Seymour:

Chipotle has identified malware that it says was used to steal customer payment data over a span of just over three weeks and all New Jersey locations were affected by the breach.

In a news release Friday, the company said customer information was compromised between March 24 and April 18. The malware searched for track data, which at times has cardholder name in addition to card number, expiration date and internal verification code. Chipotle said the malware searched from the information from the magnetic stripe of the payment card.

Chipotle said that the malware has since been removed and no other customer information was stolen. The company provided a list of locations that were affected by the breach on its website, though it is unclear how many customers were affected by the reach.

A spokesman for the company told Reuters that the breach hit most of its roughly 2,250 restaurants.
The news of the breach comes over a year after an E.coli outbreak that diminished customer trust in the popular restaurant was declared as having ended. Chipotle disclosed the breach at an investor meeting in April.

All Chipotle locations in New Jersey were impacted by the breach, including restaurants in the following cities:

• Basking Ridge
• Brick
• Bridgewater
• Cherry Hill
• Clark
• East Brunswick
• Edison
• Englewood
• Fort Lee
• Freehold
• Hoboken
• Howell
• Moorsetown
• Morris Plains
• New Brunswick
• New Providence
• Parsippany
• Princeton
• Toms River
• Red Bank
• Wayne
• West Caldwell
• Westfield

You can view the full list impacted restaurants and the dates of the breach by clicking here.

Photo by Andrew Renneisen/Getty Images News/ Getty Images