Chipotle Mexican Grill and Workday Report Data Breach in New Hampshire
Chipotle Mexican Grill, Inc. and its technology partner Workday filed a data breach report with the New Hampshire Attorney General on December 23, 2025. The filing indicates that personal information held by these companies was subjected to unauthorized access.
- State
- New Hampshire
- Reported
- December 23, 2025
Chipotle Mexican Grill, Inc. and Workday officially reported a data breach to the New Hampshire Attorney General on December 23, 2025. This public filing confirms an incident where protected information was accessed without authorization.
The public record does not specify the exact types of personal information that were exposed. However, the report is currently under investigation by the relevant authorities.
Organizations such as Chipotle and Workday typically manage various forms of sensitive data for employees and applicants, which may include payroll records, tax information, and other identification details necessary for human resources administration.
If you have received a data breach notification letter concerning this incident, it means that your personal information was likely among the data involved in this breach. It is important to carefully review the notification letter for specific details about the scope of the exposure and any identity protection services that may be offered.
As a general best practice, individuals who believe they may be affected should remain vigilant. Consider monitoring your credit reports and financial accounts for any signs of unusual or suspicious activity. Be cautious of unsolicited communications, especially those requesting personal or financial details.
What to do if you were affected
These general steps can help limit the risk of identity theft and fraud after any data breach.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Related data breach cases
- Janome America, Inc.
- Sullivan Environmental Services
- City of New Britain, Inc.
- New Hampshire Housing Yardi’s RentCafe
- Pocket FM
- Werth Wealth Management, LLC
- Wei Wei & Company
- Ameriprise Financial
- Joyal Financial Management Group
- Quantum Health
- HCA Healthcare, Inc.
- Alabama Symphonic Association Inc.
- Tombigbee Healthcare Authority dba Whitfield Regional Hospital
- Foster & Eldridge LLP