Chipotle Mexican Grill, Inc. data breach

Clerk's notes

Chipotle Mexican Grill, Inc. filed a report with the Montana Attorney General on December 23, 2025, concerning a cybersecurity incident first identified on October 9, 2025. The nature of the intrusion that led to this data exposure is currently under ongoing evaluation.

The information reportedly exposed in this incident includes Full Name, Email Address, Password or Credential Hash, Mailing Address, Purchase and Order History, Payment Card Information, Social Security Number, Wage and Compensation Information, and Direct Deposit Account Details.

The compromise of such extensive personal and financial data can place affected individuals at elevated risk. This includes potential for unauthorized transactions, identity theft, and the fraudulent use of personal credentials, requiring ongoing vigilance and protective measures.

Organizations like Chipotle Mexican Grill, Inc. are legally obligated to implement robust security measures to protect sensitive data entrusted to them. A data breach of this nature suggests that these safeguards may have been insufficient, potentially indicating a failure to meet those legal duties.

If you have received a data breach notification from Chipotle Mexican Grill, Inc., it means your personal information was part of this incident. It is advisable to monitor your financial statements, credit reports, and account activity for any suspicious or unauthorized transactions.

Understanding your legal rights and options after a data breach is an important step. You can request a free case review to learn more about how this incident may affect you and explore potential recourse.

If a notification letter about this breach reached you, see every Montana data breach on file or browse all cases.