Chipotle Credit Card Breach At More Than 50 Pennsylvania Locations

By Feroze Dhanoa and Kara Seymour:

Chipotle has identified malware that it says was used to steal customer payment data over a span of just over three weeks and more than 50 Pennsylvania locations are among those affected by the breach.

In a news release Friday, the company said customer information was compromised between March 24 and April 18. The malware searched for track data, which at times has cardholder name in addition to card number, expiration date and internal verification code. Chipotle said the malware searched from the information from the magnetic stripe of the payment card.

Chipotle said that the malware has since been removed and no other customer information was stolen. The company provided a list of locations that were affected by the breach on its website, though it is unclear how many customers were affected by the reach.

A spokesman for the company told Reuters that the breach hit most of its roughly 2,250 restaurants.

The news of the breach comes over a year after an E.coli outbreak that diminished customer trust in the popular restaurant was declared as having ended. Chipotle disclosed the breach at an investor meeting in April.

Pennsylvania locations impacted by the breach include restaurants in the following cities, among others:

• Abington
• Allentown
• Cranberry Township
• Doylestown
• Easton
• Fort Washington
• King of Prussia
• Newtown Square
• North Wales
• Pittsburgh
• Philadelphia
• Trevose
• Warrington
• West Chester
• Willow Grove

You can view the full list impacted restaurants and the dates of the breach by clicking here.

Photo by Andrew Renneisen/Getty Images News/ Getty Images