{"id":126026,"date":"2021-08-12T13:23:47","date_gmt":"2021-08-12T20:23:47","guid":{"rendered":"\/blogs\/?p=126026"},"modified":"2025-06-08T23:57:03","modified_gmt":"2025-06-09T06:57:03","slug":"chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/","title":{"rendered":"Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures"},"content":{"rendered":"<p><span data-contrast=\"none\">Over the past few years, food delivery apps have made it easy for people to get their favorite cuisines brought to their doorsteps.\u00a0In 2020, consumers grew\u00a0more\u00a0accustomed to the convenience of ordering\u00a0take-out\u00a0when dining in at restaurants was no longer an option.\u00a0But\u00a0as we look ahead into 2022,\u00a0this trend is here to stay.\u00a0According to a\u00a0new\u00a0<\/span><a href=\"https:\/\/www.prnewswire.com\/news-releases\/global-online-food-delivery-services-market-report-2021-market-is-expected-to-reach-192-16-billion-in-2025--from-126-91-billion-in-2021---long-term-forecast-to-2030--301285677.html\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">report by\u00a0ResearchAndMarkets<\/span><\/a><span data-contrast=\"none\">,\u00a0the global online food delivery services market will grow from $115.07 billion in 2020 to $126.91 billion\u00a0by the end of\u00a02021.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">To get the latest deals and news from their favorite restaurants, many consumers opt in to receiving marketing emails from the dining locations they frequent the most. One such restaurant is the popular fast-food chain Chipotle Mexican Grill, which has added <\/span><a href=\"https:\/\/www.cnbc.com\/2021\/06\/22\/chipotle-tweaks-its-loyalty-program-to-offer-more-redemption-options.html\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">22.9 million consumers<\/span><\/a><span data-contrast=\"none\">\u00a0to its\u00a0loyalty program\u00a0since\u00a0launching\u00a0two years ago.\u00a0But customers who signed up to receive emails from Chipotle may have more to consider than\u00a0whether they choose queso or guacamole.\u00a0According to\u00a0<\/span><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/chipotle-s-marketing-account-hacked-to-send-phishing-emails\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">Bleeping Computer<\/span><\/a><span data-contrast=\"none\">, Chipotle\u2019s email vendor\u00a0Mailgun\u00a0was recently breached, which allowed hackers to take over the company\u2019s email marketing efforts\u00a0and reach out to unsuspecting\u00a0customers.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Let\u2019s look at how this threat emerged and what consumers can do to help protect themselves from phishing and live a happy and safe digital life online.\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<h2><b><span data-contrast=\"none\">How the Phishing Scam Works\u00a0<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Many restaurant chains like Chipotle utilize a third-party vendor\u00a0to\u00a0engage\u00a0with\u00a0customers who sign up\u00a0to receive the latest updates. Chipotle\u00a0uses\u00a0Mailgun\u00a0to help\u00a0send, receive, and\u00a0track\u00a0its marketing emails. However, bad actors were able to hack into Chipotle\u2019s\u00a0Mailgun\u00a0account,\u00a0allowing them to send out phishing emails to recipients.\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Under the guise of the\u00a0Chipotle\u00a0restaurant chain, cybercriminals\u00a0reportedly\u00a0sent\u00a0out at least 120 malicious emails within a three-day\u00a0period, luring Chipotle customers to malicious links. Most of the emails directed the unsuspecting\u00a0users to\u00a0credential-harvesting sites,\u00a0impersonating services\u00a0like a\u00a0Microsoft\u00a0365 login page.\u00a0Some messages even included malware attachments.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<h2><b><span data-contrast=\"none\">Phishing\u2019s Impact on Consumer Security <\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Although phishing is by no means a new cyberthreat, criminals have made it more difficult to spot\u00a0scam\u00a0messages with their increasingly sophisticated tactics. Most scammers disguise themselves as major corporations or other trustworthy entities to trick you into willingly providing information like\u00a0your\u00a0website login credentials or, even worse, your credit card number.\u00a0But in Chipotle\u2019s case, cybercriminals were able to hack into the company\u2019s legitimate email marketing account, making it more difficult for consumers to spot the\u00a0scam.\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">As a consumer, what can you do to sidestep these stealthy tactics and continue to enjoy\u00a0your life online? Follow these tips to help safeguard your security:\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<h4 style=\"padding-left: 40px;\"><b><span data-contrast=\"none\">1. Do your research<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/h4>\n<p style=\"padding-left: 40px;\"><span data-contrast=\"none\">While phishing has been around for years, cybercriminals continuously make these scams more sophisticated in the hopes of tricking even the most seasoned online experts. That\u2019s why it\u2019s important to stay up to date on the latest phishing techniques so you know what to look out for. Doing a quick search on recent phishing scams every once in a while will help you better spot these cyberthreats well before you find them in your inbox.\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<h4 style=\"padding-left: 40px;\"><b><span data-contrast=\"none\">2. Refrain from providing personal data<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/h4>\n<p style=\"padding-left: 40px;\"><span data-contrast=\"none\">If you receive an email that appears to be from a business\u00a0you\u00a0subscribe to, but they are asking you for personal information, stop and think. Don\u2019t click on anything or take any direct action from the message.\u00a0Cybercriminals know that consumers tend to let their guard down when they think they are communicating with an entity that they trust, so play it safe and never assume anything.\u00a0Instead, go straight to the organization\u2019s website. This will prevent you from downloading\u00a0dangerous\u00a0content from\u202fphishing\u202flinks\u202for forking over money unnecessarily.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<h4 style=\"padding-left: 40px;\"><b><span data-contrast=\"none\">3. Verify URLs in emails<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/h4>\n<p style=\"padding-left: 40px;\"><span data-contrast=\"none\">If someone sends you a\u202fmessage\u202fwith a link, hover over the link without actually clicking on it. This will allow you to see a link preview. If the URL looks suspicious, don\u2019t interact with it and delete the\u202fmessage\u202faltogether.\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<h4 style=\"padding-left: 40px;\"><b><span data-contrast=\"none\">4. Use a comprehensive security software<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/h4>\n<p style=\"padding-left: 40px;\"><span data-contrast=\"none\">Use\u00a0a\u00a0security solution, like\u202f<\/span><a href=\"https:\/\/www.mcafee.com\/en-us\/antivirus\/mcafee-total-protection.html\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">McAfee Total Protection<\/span><\/a><span data-contrast=\"none\">, which can help protect devices against malware,\u202fphishing\u202fattacks, and other threats. It includes\u202f<\/span><a href=\"https:\/\/www.mcafee.com\/consumer\/en-us\/store\/m0\/catalog\/mwad_528\/mcafee-web-advisor.html\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">McAfee\u00a0WebAdvisor<\/span><\/a><span data-contrast=\"none\">, which can help identify malicious websites.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<h2><b><span data-contrast=\"none\">Stay Protected<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Now that you know how to spot\u202fphishing\u202femails and what to do if you suspect scammers are targeting you, you\u2019re far less likely to fall for these schemes. Remember to be careful with your personal information when you use the internet and err on the side of caution whenever anybody asks you to divulge sensitive details about your identity, finances, or login information\u00a0\u2013 even if the message appears to be from a business you recognize.\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Over the past few years, food delivery apps have made it easy for people to get their favorite cuisines brought&#8230;<\/p>\n","protected":false},"author":1228,"featured_media":126029,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[13],"tags":[4145,4185],"coauthors":[7231],"class_list":["post-126026","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy-identity-protection","tag-data-breach","tag-phishing"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures | McAfee Blog Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Scam<\/title>\n<meta name=\"description\" content=\"Over the past few years, food delivery apps have made it easy for people to get their favorite cuisines brought to their doorsteps.\u00a0In 2020, consumers According to Bleeping Computer, Chipotle\u2019s email vendor Mailgun was recently breached, which allowed hackers to take over the company\u2019s email marketing efforts. Under the guise of the restaurant chain, cybercriminals sent out at least 120 malicious emails within a three-day time period using various tactics to harvest recipients\u2019 credentials. This article would further explain these tactics and provide readers with tools to protect themselves from similar phishing scams. Tips would include looking for telltale signs of phishing (even stealthy ones), refraining from providing personal data, and using a comprehensive security solution.\u202f\u202f\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures | McAfee Blog Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Scam\" \/>\n<meta property=\"og:description\" content=\"Over the past few years, food delivery apps have made it easy for people to get their favorite cuisines brought to their doorsteps.\u00a0In 2020, consumers According to Bleeping Computer, Chipotle\u2019s email vendor Mailgun was recently breached, which allowed hackers to take over the company\u2019s email marketing efforts. Under the guise of the restaurant chain, cybercriminals sent out at least 120 malicious emails within a three-day time period using various tactics to harvest recipients\u2019 credentials. This article would further explain these tactics and provide readers with tools to protect themselves from similar phishing scams. Tips would include looking for telltale signs of phishing (even stealthy ones), refraining from providing personal data, and using a comprehensive security solution.\u202f\u202f\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/\" \/>\n<meta property=\"og:site_name\" content=\"McAfee Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/McAfee\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-08-12T20:23:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-09T06:57:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/08\/300x200_Chipotle.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Vishnu Varadaraj\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@McAfee\" \/>\n<meta name=\"twitter:site\" content=\"@McAfee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Vishnu Varadaraj\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/\"},\"author\":{\"name\":\"Vishnu Varadaraj\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/f8bdc39e3b16d2e2570ece2073b2570a\"},\"headline\":\"Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures\",\"datePublished\":\"2021-08-12T20:23:47+00:00\",\"dateModified\":\"2025-06-09T06:57:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/\"},\"wordCount\":785,\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/08\/300x200_Chipotle.jpg\",\"keywords\":[\"Data Breach\",\"Phishing\"],\"articleSection\":[\"Privacy &amp; Identity Protection\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/\",\"name\":\"Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures | McAfee Blog Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Scam\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/08\/300x200_Chipotle.jpg\",\"datePublished\":\"2021-08-12T20:23:47+00:00\",\"dateModified\":\"2025-06-09T06:57:03+00:00\",\"description\":\"Over the past few years, food delivery apps have made it easy for people to get their favorite cuisines brought to their doorsteps.\u00a0In 2020, consumers According to Bleeping Computer, Chipotle\u2019s email vendor Mailgun was recently breached, which allowed hackers to take over the company\u2019s email marketing efforts. Under the guise of the restaurant chain, cybercriminals sent out at least 120 malicious emails within a three-day time period using various tactics to harvest recipients\u2019 credentials. This article would further explain these tactics and provide readers with tools to protect themselves from similar phishing scams. Tips would include looking for telltale signs of phishing (even stealthy ones), refraining from providing personal data, and using a comprehensive security solution.\u202f\u202f\",\"breadcrumb\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#primaryimage\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/08\/300x200_Chipotle.jpg\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/08\/300x200_Chipotle.jpg\",\"width\":300,\"height\":200},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy &amp; Identity Protection\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"name\":\"McAfee Blog\",\"description\":\"Internet Security News\",\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\",\"name\":\"McAfee\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"width\":1286,\"height\":336,\"caption\":\"McAfee\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/McAfee\/\",\"https:\/\/x.com\/McAfee\",\"https:\/\/www.linkedin.com\/company\/mcafee\/\",\"https:\/\/www.youtube.com\/McAfee\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/f8bdc39e3b16d2e2570ece2073b2570a\",\"name\":\"Vishnu Varadaraj\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/4218d9114a5a31272a04c8be649b0a2b\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/02\/vishnu-varadaraj-96x96.jpg\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/02\/vishnu-varadaraj-96x96.jpg\",\"caption\":\"Vishnu Varadaraj\"},\"description\":\"Vishnu Varadaraj leads product development in the areas of mobile &amp; desktop security services, identity platform and mobile threat research. Vishnu brings more than two decades of experience in building products for consumer markets with a focus on innovation &amp; customer experience. Outside of work Vishnu enjoys swimming, snowboarding, kayaking, etc. depending on the weather.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/vishnuvaradaraj\/\"],\"url\":\"https:\/\/www.mcafee.com\/blogs\/author\/vishnu-varadaraj\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures | McAfee Blog Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Scam","description":"Over the past few years, food delivery apps have made it easy for people to get their favorite cuisines brought to their doorsteps.\u00a0In 2020, consumers According to Bleeping Computer, Chipotle\u2019s email vendor Mailgun was recently breached, which allowed hackers to take over the company\u2019s email marketing efforts. Under the guise of the restaurant chain, cybercriminals sent out at least 120 malicious emails within a three-day time period using various tactics to harvest recipients\u2019 credentials. This article would further explain these tactics and provide readers with tools to protect themselves from similar phishing scams. Tips would include looking for telltale signs of phishing (even stealthy ones), refraining from providing personal data, and using a comprehensive security solution.\u202f\u202f","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures | McAfee Blog Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Scam","og_description":"Over the past few years, food delivery apps have made it easy for people to get their favorite cuisines brought to their doorsteps.\u00a0In 2020, consumers According to Bleeping Computer, Chipotle\u2019s email vendor Mailgun was recently breached, which allowed hackers to take over the company\u2019s email marketing efforts. Under the guise of the restaurant chain, cybercriminals sent out at least 120 malicious emails within a three-day time period using various tactics to harvest recipients\u2019 credentials. This article would further explain these tactics and provide readers with tools to protect themselves from similar phishing scams. Tips would include looking for telltale signs of phishing (even stealthy ones), refraining from providing personal data, and using a comprehensive security solution.\u202f\u202f","og_url":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/","og_site_name":"McAfee Blog","article_publisher":"https:\/\/www.facebook.com\/McAfee\/","article_published_time":"2021-08-12T20:23:47+00:00","article_modified_time":"2025-06-09T06:57:03+00:00","og_image":[{"width":300,"height":200,"url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/08\/300x200_Chipotle.jpg","type":"image\/jpeg"}],"author":"Vishnu Varadaraj","twitter_card":"summary_large_image","twitter_creator":"@McAfee","twitter_site":"@McAfee","twitter_misc":{"Written by":"Vishnu Varadaraj","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#article","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/"},"author":{"name":"Vishnu Varadaraj","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/f8bdc39e3b16d2e2570ece2073b2570a"},"headline":"Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures","datePublished":"2021-08-12T20:23:47+00:00","dateModified":"2025-06-09T06:57:03+00:00","mainEntityOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/"},"wordCount":785,"publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/08\/300x200_Chipotle.jpg","keywords":["Data Breach","Phishing"],"articleSection":["Privacy &amp; Identity Protection"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/","url":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/","name":"Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures | McAfee Blog Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Scam","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#primaryimage"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/08\/300x200_Chipotle.jpg","datePublished":"2021-08-12T20:23:47+00:00","dateModified":"2025-06-09T06:57:03+00:00","description":"Over the past few years, food delivery apps have made it easy for people to get their favorite cuisines brought to their doorsteps.\u00a0In 2020, consumers According to Bleeping Computer, Chipotle\u2019s email vendor Mailgun was recently breached, which allowed hackers to take over the company\u2019s email marketing efforts. Under the guise of the restaurant chain, cybercriminals sent out at least 120 malicious emails within a three-day time period using various tactics to harvest recipients\u2019 credentials. This article would further explain these tactics and provide readers with tools to protect themselves from similar phishing scams. Tips would include looking for telltale signs of phishing (even stealthy ones), refraining from providing personal data, and using a comprehensive security solution.\u202f\u202f","breadcrumb":{"@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#primaryimage","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/08\/300x200_Chipotle.jpg","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/08\/300x200_Chipotle.jpg","width":300,"height":200},{"@type":"BreadcrumbList","@id":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chipotles-marketing-account-hacked-protect-yourself-from-phishing-scam\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.mcafee.com\/blogs\/"},{"@type":"ListItem","position":2,"name":"Privacy &amp; Identity Protection","item":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/"},{"@type":"ListItem","position":3,"name":"Chipotle\u2019s Marketing Account Hacked: Protect Yourself From Phishing Lures"}]},{"@type":"WebSite","@id":"https:\/\/www.mcafee.com\/blogs\/#website","url":"https:\/\/www.mcafee.com\/blogs\/","name":"McAfee Blog","description":"Internet Security News","publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.mcafee.com\/blogs\/#organization","name":"McAfee","url":"https:\/\/www.mcafee.com\/blogs\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","width":1286,"height":336,"caption":"McAfee"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/McAfee\/","https:\/\/x.com\/McAfee","https:\/\/www.linkedin.com\/company\/mcafee\/","https:\/\/www.youtube.com\/McAfee"]},{"@type":"Person","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/f8bdc39e3b16d2e2570ece2073b2570a","name":"Vishnu Varadaraj","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/4218d9114a5a31272a04c8be649b0a2b","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/02\/vishnu-varadaraj-96x96.jpg","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2021\/02\/vishnu-varadaraj-96x96.jpg","caption":"Vishnu Varadaraj"},"description":"Vishnu Varadaraj leads product development in the areas of mobile &amp; desktop security services, identity platform and mobile threat research. Vishnu brings more than two decades of experience in building products for consumer markets with a focus on innovation &amp; customer experience. Outside of work Vishnu enjoys swimming, snowboarding, kayaking, etc. depending on the weather.","sameAs":["https:\/\/www.linkedin.com\/in\/vishnuvaradaraj\/"],"url":"https:\/\/www.mcafee.com\/blogs\/author\/vishnu-varadaraj\/"}]}},"_links":{"self":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/126026","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/users\/1228"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/comments?post=126026"}],"version-history":[{"count":1,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/126026\/revisions"}],"predecessor-version":[{"id":215327,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/126026\/revisions\/215327"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media\/126029"}],"wp:attachment":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media?parent=126026"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/categories?post=126026"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/tags?post=126026"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/coauthors?post=126026"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}