Chipotle Breach: Company Says Malware Used To Steal Customer Payment Info

Chipotle has identified malware that it says was used to steal customer payment data over a span of just over three weeks.

In a news release Friday, the company said customer information was compromised between March 24 and April 18. The malware searched for track data, which at times has cardholder name in addition to card number, expiration date and internal verification code. Chipotle said the malware searched from the information from the magnetic stripe of the payment card.

Chipotle said that the malware has since been removed and no other customer information was stolen. The company provided a list of locations that were affected by the breach on its website, though it is unclear how many customers were affected by the reach.

A spokesman for the company told Reuters that the breach hit most of its roughly 2,250 restaurants.

The news of the breach comes over a year after an E.coli outbreak that diminished customer trust in the popular restaurant was declared as having ended. Chipotle disclosed the breach at an investor meeting in April.

A list of locations affected by the breach are available here.

Photo by Andrew Renneisen/Getty Images News/ Getty Images