Chipotle: Difference between revisions

Line 23:

===Data Breach (2017)===

Between March 24 to April 18, hackers were able to infiltrate Chipotle [[wikipedia:Point_of_sale|point of sale systems]] through a malware attack, affecting over 2,250 locations globally and resulting in some customers name, card number, expiration date, and verification code information being stolen. On April 25, Chipotle disclosed and started an investigation into the incident. Additionally The company claimed no other information was collected.<ref>{{Cite web |date=26 May 2017 |title=CHIPOTLE MEXICAN GRILL REPORTS FINDINGS FROM INVESTIGATION OF PAYMENT CARD SECURITY INCIDENT |url=https://www.oag.ca.gov/system/files/Chipotle%20-%20Substitute%20Notice%20and%20Press%20Release_0.pdf |url-status=live |access-date=13 March 2026 |website=Chipotle — Security Inciden}}</ref> <blockquote>“During the investigation we removed the malware, and we continue to work with cyber security firms to evaluate ways to enhance our security measures,” ~~the company says. “In~~ addition, we continue to support law enforcement”s investigation and are working with the payment card networks so that the banks that issue payment cards can be made aware and initiate heightened monitoring.”<ref>{{Cite web |last=TRUȚĂ |first=Filip |date=30 May 2017 |title=Chipotle customers told to 'remain vigilant' as POS hack probe reveals most restaurants affected |url=https://www.bitdefender.com/en-us/blog/hotforsecurity/chipotle-customers-told-to-remain-vigilant-as-pos-hack-probe-reveals-most-restaurants-affected |url-status=live |access-date=13 March 2026 |website=Bitdefender}}</ref></blockquote>This resulted in a lawsuit being filed against Chipotle on May 4 for failure to conduct adequate security measures and prevent future breaches.<ref name=":1">{{Cite web |last=Rizzi |first=Corrado |date=4 May 2017 |title=Guac Is Extra: Financial Outlet Sues Chipotle Over March '17 Data Breach |url=https://www.classaction.org/news/guac-is-extra-financial-outlet-sues-chipotle-over-march-17-data-breach |url-status=live |access-date=13 March 2026 |website=ClassAction}}</ref> A settlement was reached in 2019, compensating customers affected between March 24 and April 18 $250 or $10000.<ref>{{Cite web |date=23 July 2019 |title=Chipotle Data Breach Class Action Settlement |url=https://topclassactions.com/lawsuit-settlements/closed-settlements/chipotle-data-breach-class-action-settlement/ |url-status=live |access-date=14 March 2026 |website=Top Class Action}}</ref>

Between March 24 to April 18, hackers were able to infiltrate Chipotle [[wikipedia:Point_of_sale|point of sale systems]] through a malware attack, affecting over 2,250 locations globally and resulting in some customers name, card number, expiration date, and verification code information being stolen. On April 25, Chipotle disclosed and started an investigation into the incident. Additionally The company claimed no other information was collected.<ref>{{Cite web |date=26 May 2017 |title=CHIPOTLE MEXICAN GRILL REPORTS FINDINGS FROM INVESTIGATION OF PAYMENT CARD SECURITY INCIDENT |url=https://www.oag.ca.gov/system/files/Chipotle%20-%20Substitute%20Notice%20and%20Press%20Release_0.pdf |url-status=live |access-date=13 March 2026 |website=Chipotle — Security Inciden}}</ref> <blockquote>“During the investigation we removed the malware, and we continue to work with cyber security firms to evaluate ways to enhance our security measures,” In addition, we continue to support law enforcement”s investigation and are working with the payment card networks so that the banks that issue payment cards can be made aware and initiate heightened monitoring.”<ref>{{Cite web |last=TRUȚĂ |first=Filip |date=30 May 2017 |title=Chipotle customers told to 'remain vigilant' as POS hack probe reveals most restaurants affected |url=https://www.bitdefender.com/en-us/blog/hotforsecurity/chipotle-customers-told-to-remain-vigilant-as-pos-hack-probe-reveals-most-restaurants-affected |url-status=live |access-date=13 March 2026 |website=Bitdefender}}</ref></blockquote>This resulted in a lawsuit being filed against Chipotle on May 4 for failure to conduct adequate security measures and prevent future breaches.<ref name=":1">{{Cite web |last=Rizzi |first=Corrado |date=4 May 2017 |title=Guac Is Extra: Financial Outlet Sues Chipotle Over March '17 Data Breach |url=https://www.classaction.org/news/guac-is-extra-financial-outlet-sues-chipotle-over-march-17-data-breach |url-status=live |access-date=13 March 2026 |website=ClassAction}}</ref> A settlement was reached in 2019, compensating customers affected between March 24 and April 18 $250 or $10000.<ref>{{Cite web |date=23 July 2019 |title=Chipotle Data Breach Class Action Settlement |url=https://topclassactions.com/lawsuit-settlements/closed-settlements/chipotle-data-breach-class-action-settlement/ |url-status=live |access-date=14 March 2026 |website=Top Class Action}}</ref>

===Data Breach (2019)===

Line 30:

===Sending Automated Spam Messages To customers without Consent===

==== 2017 Incident ====

====2017 Incident====

On December 21, Richard Rabinowitz filed a class action lawsuit against Chipotle for allegedly violating the Telephone Consumer Protection Act by sending customers marketing messages without consent through their automatic telephone dialing system. Around November 17 through December 18, Richard Rabinowitz received 5 messages marketing the newly released Queso, however the plaintiff claims it was targeted marketing as the Queso wasn't positively received by customers. <ref>{{Cite web |last=Rizzi |first=Corrado |date=10 January 2018 |title=Florida Man Files Class Action Against Chipotle Over Alleged Unsolicited Text Messages |url=https://www.classaction.org/news/florida-man-files-class-action-against-chipotle-over-alleged-unsolicited-text-messages |url-status=live |access-date=13 March 2026 |website=ClassAction}}</ref> As of March 2026, the lawsuit is still progressing in courts.

==== 2019 Incident ====

====2019 Incident====

On June 19, a lawsuit was filed against Chipotle for allegedly sending customers marketing messages without consent using an automatic dialer for promotion of their products. As of March 2026, the case is still ongoing.<ref>{{Cite web |last=Rizzi |first=Corrado |date=19 July 2019 |title=Chipotle Hit with TCPA Class Action Over Alleged Automated Text Messages |url=https://www.classaction.org/news/chipotle-hit-with-tcpa-class-action-over-alleged-automated-text-messages |url-status=live |access-date=13 March 2026 |website=ClassAction}}</ref>

==== 2023 Incidents ====

====2023 Incidents====

On January 18, Sandra Diaz filed a lawsuit against Chipotle after receiving marketed messages on October 31 without given consent. The plaintiff alleges the company sent messages to customers using an automatic dialing system, dating to early July 2021.<ref name=":1" /> As of March 2026, the lawsuit is still in progress.

Line 47:

https://www.today.com/food/chipotle-customers-say-chain-charging-them-hundreds-dollars-fake-orders-t164862

=== Chipotle Restaurants Not Accommodating Disabled Individuals (2021-2022) ===

===Chipotle Restaurants Not Accommodating Disabled Individuals (2021-2022)===

Chipotle was involved in a lawsuit, alleging failure to provide access towards disabled customers with wheel chairs due to lack of feet comfort in tables and chairs. The case was dismissed in 2022.<ref>{{Cite web |last=White |first=Brian |date=16 February 2021 |title=Chipotle, Takao, Baby Blues-Bar-B-Q Chains Accused in ADA Lawsuits |url=https://topclassactions.com/disability-class-action-lawsuit/chipotle-takao-baby-blues-bbq-restaurant-ada-lawsuits/ |url-status=live |access-date=14 March 2026 |website=Top Class Action}}</ref>

Line 57:

===Charging Customers Extra with hidden Fee's (2021 and 2024)===

https://www.classaction.org/news/class-action-claims-chipotle-hides-fees-despite-advertising-free-and-1-delivery 2021

https://topclassactions.com/lawsuit-settlements/money/fees/chipotle-faces-class-action-lawsuit-over-hidden-delivery-fees/ -2021 (March 14)

https://www.classaction.org/news/new-chipotle-lawsuit-alleges-restaurant-cloaks-costly-service-fee-within-tax-charged-for-online-orders 2024

Line 80:

Line 82:

[https://digitalchew.com/2025/12/10/chipotle-lawsuit-woman-claims-rodent-in-burrito/ /]

=== 2015 Salmonella ===

===2015 Salmonella===

===2015 E.Coli (October)===

@@ Line 23: / Line 23: @@
 ===Data Breach (2017)===
-Between March 24 to April 18, hackers were able to infiltrate Chipotle [[wikipedia:Point_of_sale|point of sale systems]] through a malware attack, affecting over 2,250 locations globally and resulting in some customers name, card number, expiration date, and verification code information being stolen. On April 25, Chipotle disclosed and started an investigation into the incident. Additionally The company claimed no other information was collected.<ref>{{Cite web |date=26 May 2017 |title=CHIPOTLE MEXICAN GRILL REPORTS FINDINGS FROM INVESTIGATION OF PAYMENT CARD SECURITY INCIDENT |url=https://www.oag.ca.gov/system/files/Chipotle%20-%20Substitute%20Notice%20and%20Press%20Release_0.pdf |url-status=live |access-date=13 March 2026 |website=Chipotle — Security Inciden}}</ref> <blockquote>“During the investigation we removed the malware, and we continue to work with cyber security firms to evaluate ways to enhance our security measures,” the company says. “In addition, we continue to support law enforcement”s investigation and are working with the payment card networks so that the banks that issue payment cards can be made aware and initiate heightened monitoring.”<ref>{{Cite web |last=TRUȚĂ |first=Filip |date=30 May 2017 |title=Chipotle customers told to 'remain vigilant' as POS hack probe reveals most restaurants affected |url=https://www.bitdefender.com/en-us/blog/hotforsecurity/chipotle-customers-told-to-remain-vigilant-as-pos-hack-probe-reveals-most-restaurants-affected |url-status=live |access-date=13 March 2026 |website=Bitdefender}}</ref></blockquote>This resulted in a lawsuit being filed against Chipotle on May 4 for failure to conduct adequate security measures and prevent future breaches.<ref name=":1">{{Cite web |last=Rizzi |first=Corrado |date=4 May 2017 |title=Guac Is Extra: Financial Outlet Sues Chipotle Over March '17 Data Breach |url=https://www.classaction.org/news/guac-is-extra-financial-outlet-sues-chipotle-over-march-17-data-breach |url-status=live |access-date=13 March 2026 |website=ClassAction}}</ref> A settlement was reached in 2019, compensating customers affected between March 24 and April 18 $250 or $10000.<ref>{{Cite web |date=23 July 2019 |title=Chipotle Data Breach Class Action Settlement |url=https://topclassactions.com/lawsuit-settlements/closed-settlements/chipotle-data-breach-class-action-settlement/ |url-status=live |access-date=14 March 2026 |website=Top Class Action}}</ref>
+Between March 24 to April 18, hackers were able to infiltrate Chipotle [[wikipedia:Point_of_sale|point of sale systems]] through a malware attack, affecting over 2,250 locations globally and resulting in some customers name, card number, expiration date, and verification code information being stolen. On April 25, Chipotle disclosed and started an investigation into the incident. Additionally The company claimed no other information was collected.<ref>{{Cite web |date=26 May 2017 |title=CHIPOTLE MEXICAN GRILL REPORTS FINDINGS FROM INVESTIGATION OF PAYMENT CARD SECURITY INCIDENT |url=https://www.oag.ca.gov/system/files/Chipotle%20-%20Substitute%20Notice%20and%20Press%20Release_0.pdf |url-status=live |access-date=13 March 2026 |website=Chipotle — Security Inciden}}</ref> <blockquote>“During the investigation we removed the malware, and we continue to work with cyber security firms to evaluate ways to enhance our security measures,” In addition, we continue to support law enforcement”s investigation and are working with the payment card networks so that the banks that issue payment cards can be made aware and initiate heightened monitoring.”<ref>{{Cite web |last=TRUȚĂ |first=Filip |date=30 May 2017 |title=Chipotle customers told to 'remain vigilant' as POS hack probe reveals most restaurants affected |url=https://www.bitdefender.com/en-us/blog/hotforsecurity/chipotle-customers-told-to-remain-vigilant-as-pos-hack-probe-reveals-most-restaurants-affected |url-status=live |access-date=13 March 2026 |website=Bitdefender}}</ref></blockquote>This resulted in a lawsuit being filed against Chipotle on May 4 for failure to conduct adequate security measures and prevent future breaches.<ref name=":1">{{Cite web |last=Rizzi |first=Corrado |date=4 May 2017 |title=Guac Is Extra: Financial Outlet Sues Chipotle Over March '17 Data Breach |url=https://www.classaction.org/news/guac-is-extra-financial-outlet-sues-chipotle-over-march-17-data-breach |url-status=live |access-date=13 March 2026 |website=ClassAction}}</ref> A settlement was reached in 2019, compensating customers affected between March 24 and April 18 $250 or $10000.<ref>{{Cite web |date=23 July 2019 |title=Chipotle Data Breach Class Action Settlement |url=https://topclassactions.com/lawsuit-settlements/closed-settlements/chipotle-data-breach-class-action-settlement/ |url-status=live |access-date=14 March 2026 |website=Top Class Action}}</ref>
 ===Data Breach (2019)===
@@ Line 30: / Line 30: @@
 ===Sending Automated Spam Messages To customers without Consent===
-==== 2017 Incident ====
+====2017 Incident====
 On December 21, Richard Rabinowitz filed a class action lawsuit against Chipotle for allegedly violating the Telephone Consumer Protection Act by sending customers marketing messages without consent through their automatic telephone dialing system. Around November 17 through December 18, Richard Rabinowitz received 5 messages marketing the newly released Queso, however the plaintiff claims it was targeted marketing as the Queso wasn't  positively received by customers.  <ref>{{Cite web |last=Rizzi |first=Corrado |date=10 January 2018 |title=Florida Man Files Class Action Against Chipotle Over Alleged Unsolicited Text Messages |url=https://www.classaction.org/news/florida-man-files-class-action-against-chipotle-over-alleged-unsolicited-text-messages |url-status=live |access-date=13 March 2026 |website=ClassAction}}</ref> As of March 2026, the lawsuit is still progressing in courts.
-==== 2019 Incident ====
+====2019 Incident====
 On June 19, a lawsuit was filed against Chipotle for allegedly sending customers marketing messages without consent using an automatic dialer for promotion of their products. As of March 2026, the case is still ongoing.<ref>{{Cite web |last=Rizzi |first=Corrado |date=19 July 2019 |title=Chipotle Hit with TCPA Class Action Over Alleged Automated Text Messages |url=https://www.classaction.org/news/chipotle-hit-with-tcpa-class-action-over-alleged-automated-text-messages |url-status=live |access-date=13 March 2026 |website=ClassAction}}</ref>
-==== 2023 Incidents ====
+====2023 Incidents====
 On January 18, Sandra Diaz filed a lawsuit against Chipotle after receiving marketed messages on October 31 without given consent. The plaintiff alleges the company sent messages to customers using an automatic dialing system, dating to early July 2021.<ref name=":1" /> As of March 2026, the lawsuit is still in progress.
@@ Line 47: / Line 47: @@
 https://www.today.com/food/chipotle-customers-say-chain-charging-them-hundreds-dollars-fake-orders-t164862
-=== Chipotle Restaurants Not Accommodating Disabled Individuals (2021-2022) ===
+===Chipotle Restaurants Not Accommodating Disabled Individuals (2021-2022)===
 Chipotle was involved in a lawsuit, alleging failure to provide access towards disabled customers with wheel chairs due to lack of feet comfort in tables and chairs. The case was dismissed in 2022.<ref>{{Cite web |last=White |first=Brian |date=16 February 2021 |title=Chipotle, Takao, Baby Blues-Bar-B-Q Chains Accused in ADA Lawsuits |url=https://topclassactions.com/disability-class-action-lawsuit/chipotle-takao-baby-blues-bbq-restaurant-ada-lawsuits/ |url-status=live |access-date=14 March 2026 |website=Top Class Action}}</ref>
@@ Line 57: / Line 57: @@
 ===Charging Customers Extra with hidden Fee's (2021 and 2024)===
 https://www.classaction.org/news/class-action-claims-chipotle-hides-fees-despite-advertising-free-and-1-delivery 2021
+https://topclassactions.com/lawsuit-settlements/money/fees/chipotle-faces-class-action-lawsuit-over-hidden-delivery-fees/ -2021 (March 14)
 https://www.classaction.org/news/new-chipotle-lawsuit-alleges-restaurant-cloaks-costly-service-fee-within-tax-charged-for-online-orders 2024
@@ Line 80: / Line 82: @@
 [https://digitalchew.com/2025/12/10/chipotle-lawsuit-woman-claims-rodent-in-burrito/ /]
-=== 2015 Salmonella ===
+===2015 Salmonella===
 ===2015 E.Coli (October)===