.png)
Chipotle Mexican Grill Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Chipotle Mexican Grill Inc. and Workday data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Chipotle Mexican Grill and Workday
Chipotle Mexican Grill Inc. is a well-known American fast-casual restaurant chain that was founded in 1993 in Denver, Colorado. The company specializes in customizable burritos, bowls, tacos and salads, focusing on fresh ingredients and ethical sourcing.
With over 4,000 locations primarily in the United States, Chipotle serves hundreds of thousands of customers daily and employs more than 130,000 people.
What happened?
In October 2025, Chipotle discovered suspicious activity in employees' Workday payroll accounts. Between Oct. 9 and Oct. 26, 2025, unauthorized logins, profile changes and deposit account changes were detected in Workday profiles belonging to Chipotle employees.
The investigation revealed that, when viewed, other pages in a Workday profile could contain sensitive information.
Possible Information Exposed
- Social Security number
- Date of birth
- Account number
- Routing number
The breach was reported to state authorities on Dec. 23, 2025. In Massachusetts, 31 residents were affected, while two residents were affected in New Hampshire. Chipotle began mailing notification letters to those impacted and offered complimentary credit monitoring and identity protection services.
Your Rights and Next Steps
If you received a notice about this data breach, it means your sensitive personal information may have been exposed. This can put you at risk for identity theft and financial fraud.
Potential Next Steps
- Review the notification letter from Chipotle carefully to understand what information was involved
- Take advantage of the complimentary credit monitoring and identity theft protection services offered by Chipotle through Kroll, including credit monitoring, fraud consultation and identity theft restoration
- Regularly review account statements and credit reports for any unauthorized activity
- Consider placing a fraud alert or credit freeze with the major credit bureaus to help prevent new accounts from being opened in your name
- If you suspect identity theft, contact the Federal Trade Commission, your state attorney general and local law enforcement to report the incident and get further guidance
- Keep any documentation related to the breach and your communications with Chipotle or credit monitoring services
You May Be Entitled to Compensation
If your information was exposed in the Chipotle Mexican Grill and Workday data breach, you may be eligible to join a class action lawsuit and seek compensation. Lawyers are actively investigating this incident and are ready to assist those affected.
To find out if you qualify and to take the next steps, complete the below form to join the lawsuit investigation.
.svg)