Chipotle Mexican Grill Confirms 2025 Data Breach in Montana

Chipotle Mexican Grill, Inc., the national fast-casual restaurant chain, formally reported a data security incident to the Montana Attorney General's office. The company confirmed that unauthorized access to certain systems occurred on or around October 9, 2025. This official filing was made public on December 23, 2025.

While the specific types of information involved were not detailed in the public filing, the company's notification suggests that personal information may have been compromised. Individuals who received a data breach notification letter from Chipotle Mexican Grill are those potentially affected by this incident.

If you received such a letter, it indicates your data was identified as potentially exposed. This information is provided to help you verify the official record of the breach reported by Chipotle Mexican Grill with state regulators.

To protect yourself, it is advisable to review your account statements for any unusual activity. Consider placing a fraud alert or freezing your credit with major reporting agencies. Also, be cautious of any unsolicited communications requesting personal details, as these could be phishing attempts.

The company has indicated that an investigation into the incident is ongoing. Further specific details about the scope and impact of the breach would be communicated directly to affected individuals through official notification letters.