Consumer Rights Wiki

Chipotle

Revision as of 21:56, 15 March 2026 by SquidthePlummer (talk | contribs) (added several incidents)

❗Article Status Notice: This Article is a stub

This article is underdeveloped, and needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. Learn more ▼

Founded in 1993 by Steve Ells, Chipotle Mexican Grill, Inc. (also referred as Chipotle) is an American chain of fast casual restaurants primary serving burritos and bowls across over 4000 locations globally.

Chipotle
Basic information
Founded 1993-07-13
Legal Structure Public
Industry Food
Also known as
Official website http://chipotle.com/

Consumer-impact summary

Overview of concerns that arise from the conduct towards users of the product (if applicable):

  • User Freedom
  • User Privacy
  • Business Model
  • Market Control

Add your text below this box. Once this section is complete, delete this box by clicking on it and pressing backspace.


Incidents

This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the Chipotle category.

Data Breach (2004)

Around 2004, Hackers gained access to Chipotle payment systems, stealing customers data labelled as "Track 2" that contained customers name, card number, card expiration date, and card verification number. Chipotle found out about the attack in August after their merchant bank informed the company of the attack. Although specific details aren't publicized, through fillings with the Securities Exchange Commission:, the company lost an estimate $4.3 million in revenue starting 2004 through 2006.[1]

Misleading Advertisement regarding contents of Calories in products (2016)

In November, three customers filed a lawsuit against Chipotle for falsely advertising the quantity of calories contained in various products after eating a Chorizo Burrito that indicated the product will contain 300 calories with an in-store sign, however the actual contents amounted to over 1000 calories.[2] Chipotle responded via a tweet on twitter (now formarly X) saying; "I'm sorry for the confusion, but we'll make things more clear next time. The 300 calories is for the chorizo."[3] The lawsuit reached a settlement in October 2017 that resulted in Chipotle changing their signs to display correct calories contents and rewarding the plaintiffs $5000.[4]

In January, Leah Caldwell filed a lawsuit against Chipotle for unlawful advertisement and marketing of her photo, seeking over $2.2 billion in damages.[5] In 2006, Leah Caldwell sat in a Chitpotle restaurant when photographer Steve Adams took a photo of her while eating. Before leaving, Steve Adams asked her to sign the sign a release form, however she declined.[6] 8 years later around December, she discovered her photo was used as promotion Florida and Califronian chipotle restaurant up till 2015.[7][8] The Lawsuit reached a settlement in 2017, however specific details surrounding the agreement remain unknown.[4]

Data Breach (2017)

Between March 24 to April 18, hackers were able to infiltrate Chipotle point of sale systems through a malware attack, affecting over 2,250 locations globally and resulting in some customers name, card number, expiration date, and verification code information being stolen. On April 25, Chipotle disclosed and started an investigation into the incident. Additionally The company claimed no other information was collected.[9]

“During the investigation we removed the malware, and we continue to work with cyber security firms to evaluate ways to enhance our security measures,” In addition, we continue to support law enforcement”s investigation and are working with the payment card networks so that the banks that issue payment cards can be made aware and initiate heightened monitoring.”[10]

This resulted in a lawsuit being filed against Chipotle on May 4 for failure to conduct adequate security measures and prevent future breaches.[1] A settlement was reached in 2019, compensating customers affected between March 24 and April 18 $250 or $10000.[11]

Data Breach (2019)

Around April, people posted on Reddit and X (Formally Twitter) of their accounts being used to order food across different locations.[12] A spokesperson at Chipotle responded by saying the attack was due to credential stuffing, however several customers claimed to have unique passwords specific to Chipotle.[13] The exact amount of customers affect, along with specific dates towards fixing the vulnerability and names of perpetrators, remains unknown.

2017 Incident

On December 21, Richard Rabinowitz filed a class action lawsuit against Chipotle for allegedly violating the Telephone Consumer Protection Act by sending customers marketing messages without consent through their automatic telephone dialing system. Around November 17 through December 18, Richard Rabinowitz received 5 messages marketing the newly released Queso, however the plaintiff claims it was targeted marketing as the Queso wasn't positively received by customers. [14] As of March 2026, the lawsuit is still progressing in courts.

2019 Incident

On June 19, a lawsuit was filed against Chipotle for allegedly sending customers marketing messages without consent using an automatic dialer for promotion of their products. As of March 2026, the case is still ongoing.[15]

2023 Incident

On January 18, Sandra Diaz filed a lawsuit against Chipotle after receiving marketed messages on October 31 without given consent. The plaintiff alleges the company sent messages to customers using an automatic dialing system, dating to early July 2021.[1] As of March 2026, the lawsuit is still in progress.

False Advertising on non-GMO food (2015)

On August 28, Chipotle was sued for falsely advertising their products not using ingredients containing GMO after conducting an advertisement campaign promising consumers their "G-M-Over it".[16][17] The lawsuits claims the company violated California's False Advertising Law, alleging the company's meat and dairy products came from animals that feed on GMOs. Chipotle responded by saying they've been transparent with customers and alleging they "didn't raise prices because of our move to non-GMO ingredients" [18] On September 11, 2019, a $6.5 million settlement was reached that compensated customers who ordered from April 27, 2015 till June 30, 2016, allowing for $2 back up to 5 purchases, with document proof awarding $20 for 10 purchases.[19][20]

Charging Customers as much a $100 extra (2019)

In 2019, customers went to Reddit and X of their accounts being charged extra for orders they didn't making, with some instances reaching over $200. Some customers reported not receiving a response from Chipotle after emailing and contacting their support team.[21][22] Chipotle responded to the situation in October, stating users privacy and security is of upmost important and ensuring customers information is safe. Additionally, Chipotle said it " has not identified any indication that user names and passwords were taken from Chipotle’s network", however the company remain persistant on denying any financial data being stolen.[23]

Chipotle Restaurants Not Accommodating Disabled Individuals (2021-2022)

Chipotle was involved in a lawsuit, alleging failure to provide access towards disabled customers with wheel chairs due to lack of feet comfort in tables and chairs. The case was dismissed in 2022.[24]

AI-voice ordering systems unlawfully collected Customers Data (2022)

On August 24, Chipotle was involved in a lawsuit alleging the company's AI voice ordering systems, designed to help customers orders over the phone, collected customers voiceprints without properly disclosing voice collection to customers, violating the Biometric Information Privacy Act.[25][26] The lawsuit is still ongoing as of March 2026.

Charging Customers Extra with hidden Fee's(2020 and 2024)

2021 Incident

Dating back to December 18, 2019[27], Chipotle ran several advertisements announcing $1 or $0 delivery fees as promotion for their newly releases products.[28] Several customers on reddit reported of the $1 delivery charge being misleading and having an increase in price, sharing their personal experience and frustration at the company.[29] One customer affected, John Dundon, used the Chipotle app in October 2020 to make a purchase, totalling to $38 with an additional $2.86 "Service fee" being applied on his order. In 2021, John Dundon filed a lawsuit against Chipotle for deceiving customers into believing their delivery fee was $1 or free, meanwhile charging customers 10% more with a "Service Charge" for delivery orders.[30] The case reached a settlement on March 7, 2022, that compensates customers purchases with the delivery app between May 11, 2020, and January 19, 2022.[31]

2024 Incident

Around April, a tiktok user going by the name of Erik posted a video detailing his wife getting an unexpected charge on a Chipotle order. The post would go to gain around 1.4 million views, sparking controversy into the company alleged hidden fee practices, with the comment section sharing immense frustration and disgust.[32] This resulted in a lawsuit against Chipotle In July 31, 2024, claiming the company charges customers extra for delivery orders through a service fee. The Lawsuit is still ongoing as of March 2026.[33][34]

Refusing any Refunds made with Gift Card purchases (2024)

https://www.classaction.org/news/chipotle-gift-card-refunds-lawsuit-says-meal-vouchers-are-worthless

Chipotle Quietly lessen Food Quantity

This section is incomplete. This notice can be deleted once all the placeholder text has been replaced.

https://www.the-sun.com/money/12792714/chipotle-ceo-change-orders-diners-threatened-boycott/

Chipotle Focus on Wealthier Customers (2026)

On February 7. Wall Street Apes posted a video on X (formerlly twitter) reaching over 3.9 million views and reaching attention with mainstream media outlets and on Reddit. The video contained a clip of Chipotle CEO announcing plans to raise prices due to a larger base of wealthier customers in a February 3 earnings call.[35]

“We learned that 60% of our core users are over $100,000 a year in income, in average household income. That gives us confidence that we can lean into that group in a more meaningful way — to really drive meaningful transaction performance in the year”[36]

The company hasn't issued a public statement as of March 2026.[37]

Health Violations

This section is incomplete. This notice can be deleted once all the placeholder text has been replaced.

Controversy

Year

Description

Hepatitis Outbreak

 2008

Norovirus Outbreak

 2008

E.Coli

 2015

Norovirus Outbreak

 2015

Salmonella

 2015

E.Coli

 2015

Norovirus

 2015

Norovirus

 2017

Clostridium perfringens

 2018

Bowls Contain Caner Chemicals

 2019-2020

Rodent Found Inside Burritos

 December 2025 https://digitalchew.com/2025/12/10/chipotle-lawsuit-woman-claims-rodent-in-burrito/

https://www.ndtv.com/food/us-woman-claims-she-bit-into-rodent-inside-chipotle-burrito-bowl-sues-chain-9791182 (both received march 14)

[38]

Everything below achieved march 13

https://www.foodpoisoningnews.com/food-poisoning-at-chipotle-a-history-of-food-safety-issues/

https://www.foodpoisoningnews.com/food-poisoning-at-chipotle-a-history-of-food-safety-issues/

https://archive.cdc.gov/#/details?url=https://www.cdc.gov/ecoli/2015/o26-11-15/index.html

https://www.foodmanufacturing.com/ingredients/news/13182117/e-coli-outbreak-linked-to-chipotle-expands-to-6-states

https://www.wcpo.com/lifestyle/food/chipotle-e-coli-outbreak-spreads-to-akron-store

https://www.wral.com/story/cause-of-ohio-chipotle-outbreak-identified/17773868/

https://www.devicedaily.com/pin/chipotle-eats-itself/

https://www.mashed.com/250704/scandals-chipotle-can-never-live-down/ (Chipotle Bowls Contain Cancer related Chemicals (2019-2020))

See also

References

  1. ↑ 1.0 1.1 1.2 Rizzi, Corrado (4 May 2017). "Guac Is Extra: Financial Outlet Sues Chipotle Over March '17 Data Breach". ClassAction. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  2. ↑ McNeal, Stephanie (22 November 2016). "People Are Furious With Chipotle Because They Thought A Burrito Was 300 Calories". BuzzFeed News. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  3. ↑ "Chipotle sued over misleading '300-Calorie' burrit". ABC13. 24 November 2016. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  4. ↑ 4.0 4.1 Smith, Jacob (31 October 2024). "13 Shady Things You Can't Ignore About Chipotle". TheTakeout. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  5. ↑ "Using a Person's Image for Commercial Purposes: Lessons Learned from the Chipotle $2.2 Billion Lawsuit". TarterKrinsky & Drogin. 25 January 2017. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  6. ↑ Pham, Peter (6 January 2017). "Chipotle Faces $2 Billion Lawsuit For Allegedly Using Photo Of Woman Without Permission". FoodBeast. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  7. ↑ Hillen, Brittany (9 January 2017). "Chipotle sued for $2.2b for allegedly using woman's photo without permission". DPreview. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  8. ↑ "A Woman Is Suing Chipotle For $2.2 Billion". HnHH. 22 November 2022. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  9. ↑ "CHIPOTLE MEXICAN GRILL REPORTS FINDINGS FROM INVESTIGATION OF PAYMENT CARD SECURITY INCIDENT" (PDF). Chipotle — Security Inciden. 26 May 2017. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  10. ↑ TRUȚĂ, Filip (30 May 2017). "Chipotle customers told to 'remain vigilant' as POS hack probe reveals most restaurants affected". Bitdefender. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  11. ↑ "Chipotle Data Breach Class Action Settlement". Top Class Action. 23 July 2019. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  12. ↑ "DATA BREACH AT CHIPOTLE FAST FOOD RESTAURANT, DOZENS OF APP ACCOUNTS WERE HACKED". International Institute of Cyber Security. 24 April 2019. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  13. ↑ Whittaker, Zack (17 April 2019). "Chipotle customers are saying their accounts have been hacked". Techrunch. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  14. ↑ Rizzi, Corrado (10 January 2018). "Florida Man Files Class Action Against Chipotle Over Alleged Unsolicited Text Messages". ClassAction. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  15. ↑ Rizzi, Corrado (19 July 2019). "Chipotle Hit with TCPA Class Action Over Alleged Automated Text Messages". ClassAction. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  16. ↑ "Food With Integrity --G-M-Over It". Chipotle. 14 March 2026. Archived from the original on 27 April 2015. Retrieved 14 March 2026.
  17. ↑ "Woman Sues Chipotle Over GMO-Free Menu Claims". Food Logistics. 1 September 2015. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  18. ↑ Aubrey, Allison (2 September 2015). "Class-Action Suit Alleges Chipotle's GMO-Free Campaign Is Deceptive". NPR. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  19. ↑ Lalley, Heather (13 September 2019). "Chipotle to pay $6.5M to settle class-action suit over non-GMO claims". Restaurant Business. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  20. ↑ "$6.5 Million Settlement Reached on Eve of Trial in Class Action Lawsuit Against Chipotle Over the Meaning of "Non-GMO"". National Law Review. 16 September 2019. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  21. ↑ "Anyone else have their app hacked". Reddit. 14 March 2026. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  22. ↑ "Chipotle account hacked - ordered with my card to be delivered to his house". Reddit. 14 March 2026. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  23. ↑ Callahan, Chrissy (17 October 2019). "Chipotle customers say the chain is charging them hundreds of dollars in fake orders". Today. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  24. ↑ White, Brian (16 February 2021). "Chipotle, Takao, Baby Blues-Bar-B-Q Chains Accused in ADA Lawsuits". Top Class Action. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  25. ↑ Rizzi, Corrado (26 August 2026). "Applebee's, Red Lobster, Other Restaurants Hit with Biometric Privacy Suit in Illinois Over AI Voice Ordering Systems". ClassAction. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  26. ↑ "Applebees, Chipotle, other restaurants face class action alleging automated voice ordering technology data privacy violations". Top Class Action. 29 August 2022. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  27. ↑ "Chipotle Intercepts All Types Of Delivery Fees To Kick Off Its Free Delivery Bowl". Chipotle. 15 March 2026. Archived from the original on 10 February 2026. Retrieved 15 March 2026.
  28. ↑ "Chipotle Mexican Grill TV Spot, '$1 Delivery: Straight To Your Door'". Ispot. 12 May 2020. Archived from the original on 7 October 2022. Retrieved 15 March 2026.
  29. ↑ "PSA: 1$ delivery fee is misleading". Reddit. 22 October 2020. Retrieved 15 March 2026.{{cite web}}: CS1 maint: url-status (link)
  30. ↑ Zorzut, Adrian (28 May 2022). "CASH BACK Chipotle customers who got orders delivered could be owed money after $4million lawsuit – see if you can claim". The U.S. Suns. Archived from the original on 28 May 2022. Retrieved 15 March 2026.
  31. ↑ "Chipotle hidden delivery fees $4M class action settlement". Top Class Action. 7 March 2022. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  32. ↑ Singh, Sahib (12 April 2024). "Man Alleges Chipotle Adds 'Service Charge' to Orders, Stirs Debate on Pricing Transparency". Market Realist. Retrieved 15 March 2026.{{cite web}}: CS1 maint: url-status (link)
  33. ↑ Rizzi, Corrado (5 August 2024). "New Chipotle Lawsuit Alleges Restaurant 'Cloaks' Costly Service Fee Within Tax Charged for Online Orders". ClassAction. Retrieved 13 March 2026.{{cite web}}: CS1 maint: url-status (link)
  34. ↑ Cameron, Jess (9 August 2024). "Chipotle Class Action Lawsuit: Service Fees Disguised as Taxes?". Injury Claims. Retrieved 15 March 2026.{{cite web}}: CS1 maint: url-status (link)
  35. ↑ Guszkowski, Joe (10 February 2026). "Chipotle works to correct misleading reports about pricing". Restaurant Buisness. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  36. ↑ "CEO of Chipotle caught on a recording indicating they're going to keep raising prices because they can". X. 7 February 2026. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  37. ↑ Napiza, Chelsie (8 February 2026). "CEO of Chipotle Allegedly Caught on Recording Indicating They're Going to Keep Raising Prices 'Because They Can'". International Business Times. Retrieved 14 March 2026.{{cite web}}: CS1 maint: url-status (link)
  38. ↑ "Office of Public Affairs". justice.gov. 2020-04-21.
Retrieved from "https://consumerrights.wiki/index.php?title=Chipotle&oldid=43606"