Data Breach Class Action Filed Against Chipotle

A consumer has filed a putative class action alleging Chipotle
Mexican Grill, Inc. failed to take measures to prevent an April 2017
data breach in which hackers used malware to steal customer data
from the magnetic stripes on payment cards. Baker v. Chipotle
Mexican Grill, Inc., No. 17­-1134 (C.D. Cal., filed June 9, 2017). The
complaint alleges that Chipotle failed to take “adequate and
reasonable measures” to protect its data systems, which
reportedly contain personally identifiable information in addition
to payment card data. The plaintiff seeks class certification,
equitable relief, damages and attorney’s fees.

Issue 638