Bloomberg Law
Dec. 17, 2019, 6:19 PM

Chipotle Data Breach Settlement Approved by Colorado Judge

Daniel R. Stoller
Daniel R. Stoller
Senior Legal Editor

Chipotle Mexican Grill, Inc. will pay customers up to $250 under a settlement approved by a Colorado federal judge to end data breach claims from a 2017 hack.

Chipotle also will pay class representatives $10,000 and update data security, according to the settlement approved Dec. 16 by U.S. District Judge Christine Arguello of the District of Colorado. The fast casual food chain will pay $1.2 million in attorneys’ fees.

Hackers accessed names, payment card numbers, and other data through malware that affected point-of-sales terminals at 2,220 Chipotle restaurants in the U.S.

Chipotle’s deal shows how businesses end data breach claims ...