The Chipotle Mexican Grill experienced a significant cybersecurity incident that was part of a broader series of attacks attributed to the cybercriminal group known as FIN7. Over the course of their operations in the United States, FIN7 breached the computer networks of companies across 47 states and the District of Columbia, managing to steal more than 15 million customer card records from over 6,500 individual point-of-sale terminals at more than 3,600 separate business locations. These attacks not only targeted Chipotle but also other well-known chains including Chili’s, Arby’s, and Jason’s Deli, highlighting the widespread impact of FIN7’s activities. Additionally, the Emerald Queen Casino in Western Washington was among the targeted local businesses, demonstrating the group's reach beyond the food industry. The breaches led to the compromise of vast amounts of customer data, causing severe damages to the company's reputation and potentially its finances due to the theft of customer financial information.
"id": "chi608050724",
"linkid": "chipotle-mexican-grill",
"type": "Cyber Attack",
"date": "04/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"