Chipotle Mexican Grill, Inc.

Companies / web services

Aliases / services: チポトレ・メキシカン・グリル / Chipotle / Chipotle Mexican Grill, Inc.
Official website: https://www.chipotle.com/

Sources identifying the operating company

https://www.chipotle.com/privacy-policy

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

card payments at affected restaurants

Response status: Not listed
Response information checked: 2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

POS malware collected card-track information at some restaurants during March 24–April 18, 2017. Affected dates vary by location; not every customer was affected.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review payment-card statements and report suspicious charges to the card issuer.

Official service URL

https://www.chipotle.com/

Source URLs

2017-05-26 official security noticehttps://ir.chipotle.com/news-releases?item=122402Service and operation documentation

Related official sources

Operator and official informationOfficial information directoryIdentifies Chipotle Mexican Grill, Inc. and the relevant service scope.
2017-05-26 official security noticeOfficial notice; link to this PHP incident unconfirmedPOS malware collected card-track information at some restaurants during March 24–April 18, 2017.