---
title: "Chipotle Customers Say Hackers are Ordering Through Their Accounts"
url: https://burnaze.com/article/928e4877-a4cb-47ec-904f-f1c0691a1bb3
source: "1851 Franchise"
original_url: https://1851franchise.com/chipotle-customers-say-hackers-are-ordering-through-their-accounts-2709739
category: "Mexican"
industry: "Restaurants"
segment: "Mexican"
published: 2019-04-18T20:15:57.000Z
modified: 2026-11-01T02:36:23.205Z
image: https://newimage.1851franchise.com/cdn-cgi/image/quality=85,format=webp,width=1280,height=720/story/featureImage/849c1adf05ae95610f883714a74c14d44320.jpg
---

# Chipotle Customers Say Hackers are Ordering Through Their Accounts

**TL;DR:** Chipotle customers are reporting that hackers are ordering through their accounts, leading to fraudulent charges. The breach is blamed on credential stuffing, where hackers use usernames and passwords from other hacked sites.

*originally published in 1851 Franchise on 2019-04-18. [Read the original](https://1851franchise.com/chipotle-customers-say-hackers-are-ordering-through-their-accounts-2709739).*

## Story

As online ordering and delivery quickly become the norm for fast-casual and quick-service chains, the rollout of new applications can be a siren song for hackers. TechCrunch reports that a string of Chipotle customers are posting on Reddit and tweeting at Chipotle that they were charged for food that was delivered to other states. The customers’ accounts and credit card information was hacked, leading to hundreds of dollars in fraudulent charges.

A Chipotle spokesperson blamed the breach on credential stuffing—tapping into usernames and passwords that consumers use on both Chipotle’s app and on other sites that have been hacked—saying the chain sees “no indication of a breach of private data of our customers.” However, several allegedly hacked individuals TechCrunch spoke with said the password they use for Chipotle is unique to that account. One person even said they never even created a Chipotle account, but had checked out as a guest in the past.

TechCrunch reports that if credential stuffing is the issue, two-factor authentication would help prevent breaches like this. “But when asked if Chipotle has plans to roll out two-factor authentication to protect its customers going forward, spokesperson Schalow declined to comment,” writes TechCrunch.

## Entities

- 1851 Franchise (publication)
- Restaurants (sector)
- Chipotle (company)
- online ordering (topic)
- Reddit (company)
- data breach (topic)
- two-factor authentication (topic)
- credential stuffing (topic)

---
Originally reported by 1851 Franchise (https://1851franchise.com/chipotle-customers-say-hackers-are-ordering-through-their-accounts-2709739). Summarized by Burnaze (https://burnaze.com/article/928e4877-a4cb-47ec-904f-f1c0691a1bb3).