Fast food chain Chipotle Mexican Grill Inc (NYSE:CMG) was the victim of a cyber attack, in which credit card information was stolen
Hackers stole the data from customers reportedly between March 24 and April 18.
A post on the Chipotle website on Friday (May26) said an investigation had been completed, involving cyber security firms, law enforcement, and payment card networks.
Malware infected registers..
The post revealed the kind of malware used - one that infected cash registers - and listed the restaurants that were affected.
The list of attacked restaurants includes many major US cities and the firm worked with police and cybersecurity firms on an investigation.
"During the investigation, Chipotle removed the malware and continues to work with cyber security firms to evaluate ways to enhance its security measures," it said in the post.
Customer data at risk....
Data potentially at risk was reportedly the cardholder's name, card number, expiration date and internal verification code.
"Customers that used a payment card at an affected location during its at-risk time frame should remain vigilant to the possibility of fraud by reviewing their payment card statements for any unauthorized activity," the post said.
Chipotle shares closed Friday in New York down 0.17% to $480.15.