Chipotle Breach: All Tennessee Locations Where Data Compromised

Officials with fast-casual chain Chipotle identified malware it says was used to steal customer payment data over a span of just over three weeks, and several Tennessee locations were among those affected by the breach.

In a news release, the company said customer information was compromised between March 24 and April 18. The malware searched for track data, which can include cardholder names in addition to card numbers, expiration dates and internal verification codes. Chipotle said the malware searched from the information from the magnetic stripe of the payment card. (For more updates on this story and free news alerts for your neighborhood, sign up for your local Tennessee Patch morning newsletter.)

The malware has been removed and no other customer information was stolen. The company provided a list of locations that were affected by the breach on its website, though it is unclear how many customers were affected.

A spokesman for the company told Reuters that the breach hit most of its roughly 2,250 locations.

The news of the breach comes over a year after an E.coli outbreak that diminished customer trust in the popular restaurant was declared as having ended. Chipotle disclosed the breach at an investor meeting in April.

These Tennessee locations were affected by the breach:

• Brentwood: 269 Franklin Road
• Clarksville: 625 Kennedy Lane
• Cordova: 695 North Germantown Parkway, Ste. 101
• Franklin: 430 Cool Springs Blvd.
• Knoxville: 7600 Kingston Pike, Suite 1348A; 4829 N. Broadway St.; 204 Advantage Place; 1701 Cumberland Avenue; 11380 Parkside Drive
• Memphis: 5865 US Highway 72, Suite 104; 2760 N Germantown Pkwy, Suite 1230 and ST01
• Nashville: 96 White Bridge Road, Ste 103; 6838 Charlotte Pike; 400 21st Avenue South; 3900 Hillsboro Pike, Ste 28; 2825 West End Avenue
• Oak Ridge: 433 South Illinois Ave, A
• Sevierville: 1713 Parkway

Image by J.R. Lind, Patch staff

Reporting by Feroze Dhanoa, Patch staff