CHIPOTLE MEXICAN GRILL, INC.
bd_4e513ecdc7403535 · schema v1 · pii pii-v1
Full breach record for CHIPOTLE MEXICAN GRILL, INC. →6 incidents on fileChipotle Mexican Grill reported a payment card security incident involving malware on point-of-sale devices at certain restaurants between March 24, 2017, and April 18, 2017. The malware captured track data from magnetic stripes, including card numbers, expiration dates, verification codes, and sometimes cardholder names. The company removed the malware, engaged cybersecurity firms, and cooperated with law enforcement and payment card networks. No other customer information was indicated to be affected.
J jump to incidentP pin to compareR raw source
Incident timeline
Mar 24, 2017
Begins
May 26, 2017
Filed
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- New Hampshire State AGbd_68391e5edcfbc00a2017-05-26Verified
- Massachusetts State AGbd_99ddd997d03160572017-05-26Verified
- Oregon State AGbd_f910c3c2c36eafa82017-05-26Candidate
- South Carolina State AGbd_59524e43cb4ebde02017-05-30 · +4dVerified
Show 1 more filing ↓Show fewer ↑up to 10d gap
- Montana State AGbd_adb56249b3ae66352017-06-05 · +10dVerified by operator
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing May 26 (NH), last Jun 5 (MT) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.