Earlier quoted context omitted.
No, but it has been in the past. I'm speaking theoretically in general when people are wronged by things like this.
Your credit card company should offer a $0 liability policy for fraudulent charges. If not, switch card companies. Then it's their problem not yours.
Chipotle Reports Findings from Investigation of Payment Card Security Incident
41–50 of 73 posts
Re: Chipotle Reports Findings from Investigation of Payment Card Security Incident
#42Earlier quoted context omitted.
A quick look at the chrome dev tools will point to a us.json which has what you're looking for.
That's a massive list. 2249 restaurants.
Re: Chipotle Reports Findings from Investigation of Payment Card Security Incident
#43Earlier quoted context omitted.
Chipreaders are terribly slow, I don't understand how they could not develop a secure payment system without 10-second~ delay times. My local grocery store installed new chip readers and within a week had taped over time in favor of the more-expensive but quicker stripe processing.
Hilariously, using contactless EMV payment (i.e. Apple/Android Pay) with the same POS terminals is lightning fast. But this gets filed as "infrastructure is hard". A related example: If you get a chance, try the IC card system used by the train and transit systems in Japan; they're delightful.[1] At peak rush-hour, commuters are darn near running through the (many) pay stations tapping through without breaking stride…
Re: Chipotle Reports Findings from Investigation of Payment Card Security Incident
#44Earlier quoted context omitted.
No, but it has been in the past. I'm speaking theoretically in general when people are wronged by things like this.
Your credit card company should offer a $0 liability policy for fraudulent charges. If not, switch card companies. Then it's their problem not yours.
How hard is this to understand?
Re: Chipotle Reports Findings from Investigation of Payment Card Security Incident
#45Hopefully this pushes more and more restaurants towards using separate chip-reader (EMV) pinpad devices. I've noticed several area restaurants switching lately (Arby's, Wendy's), and I hope it continues. These devices use point-to-point encryption, meaning that even if the POS machine is comprimised, no sensitive card data can be stolen. The POS machine never sees raw card data.
Chipreaders are terribly slow, I don't understand how they could not develop a secure payment system without 10-second~ delay times. My local grocery store installed new chip readers and within a week had taped over time in favor of the more-expensive but quicker stripe processing.
Everyone else, yeah, pretty slow.
I am surprised that apparently only 1 vendor has figured out how to make a good chip reader, and I am sad that apparently other retailers don't care enough to buy from that one vendor.
Re: Chipotle Reports Findings from Investigation of Payment Card Security Incident
#46Hopefully this pushes more and more restaurants towards using separate chip-reader (EMV) pinpad devices. I've noticed several area restaurants switching lately (Arby's, Wendy's), and I hope it continues. These devices use point-to-point encryption, meaning that even if the POS machine is comprimised, no sensitive card data can be stolen. The POS machine never sees raw card data.
Re: Chipotle Reports Findings from Investigation of Payment Card Security Incident
#47Earlier quoted context omitted.
Your credit card company should offer a $0 liability policy for fraudulent charges. If not, switch card companies. Then it's their problem not yours.
Yes, and if you're with a decent company chances are they'll automatically send you a new card if you've been affected.
Re: Chipotle Reports Findings from Investigation of Payment Card Security Incident
#48Earlier quoted context omitted.
That's a massive list. 2249 restaurants.
I am appalled at the attempt by Chipotle to downplay the scope and scale of the incident. The sentence which reads, " Not all locations were involved, and the specific time frames vary by location", is a blatant attempt to deflate the significance of the problem. This public disclosure should have been more direct, and disclose in plain language the number of stores affected. Chipotle should explain the full impact i…
For reference, Wikipedia claims Chipotle has 3,010 restaurants. So at least 75%.
Re: Chipotle Reports Findings from Investigation of Payment Card Security Incident
#49Earlier quoted context omitted.
That's a massive list. 2249 restaurants.
I am appalled at the attempt by Chipotle to downplay the scope and scale of the incident. The sentence which reads, " Not all locations were involved, and the specific time frames vary by location", is a blatant attempt to deflate the significance of the problem. This public disclosure should have been more direct, and disclose in plain language the number of stores affected. Chipotle should explain the full impact i…
The file name in question (thanks, heywire) is "us.json". I'm left wondering whether and how much of an international scope there might be to this.
While the version of their web site that I'm receiving by default seems to be geo-centric to the U.S. and doesn't mention foreign locations, Wikipedia has:
https://en.wikipedia.org/wiki/Chipotle_Mexican_Grill
Chipotle Mexican Grill, Inc. (/tʃᵻˈpoʊtleɪ/)[6] is an American chain of fast casual restaurants in the United States, United Kingdom,[7] Canada,[8][9] Germany,[10] and France
Re: Chipotle Reports Findings from Investigation of Payment Card Security Incident
#50Earlier quoted context omitted.
Yes, and if you're with a decent company chances are they'll automatically send you a new card if you've been affected.
Leaving you without a card for 7-10 business days.
Who doesn't ship next day anyway?