.png)
Chipotle Mexican Grill Data Breach Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Chipotle Mexican Grill Inc. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Chipotle Mexican Grill
Chipotle Mexican Grill Inc. is a well-known American fast-casual restaurant chain that was founded in 1993 in Denver, Colorado. The company specializes in customizable burritos, bowls, tacos and salads, focusing on fresh ingredients and ethical sourcing.
With over 4,000 locations primarily in the United States, Chipotle serves hundreds of thousands of customers daily and employs more than 130,000 people.
What happened?
In October 2025, Chipotle discovered suspicious activity in its employees' Workday payroll accounts. Between Oct. 9 and Oct. 26, 2025, unauthorized logins, profile changes and deposit account changes were detected in Workday profiles belonging to Chipotle employees.
The investigation revealed that, when viewed, other pages in a profile could contain sensitive information. So far, the data breach has impacted at least 31 individuals in Maine, 15 in Montana, and two in New Hampshire.
Information Exposed:
- Social Security number
- Date of birth
- Account number
- Routing number
Beginning on Dec. 23, 2025, the breach was reported to state authorities in Massachusetts, Montana, New Hampshire, and Vermont. Chipotle began mailing notification letters to those impacted.
You May Be Entitled to Compensation
If your information was exposed in the Chipotle Mexican Grill data breach, you may be eligible to join a class action lawsuit and seek compensation. Lawyers are actively investigating this incident and are ready to assist those affected.
To find out if you qualify and to take the next steps, complete the below form to join the lawsuit investigation.
.svg)