Why is there no legal recourse here outside of spending my own time/resources to cancel cards and deal with all the BS that occurs with that whenever this happens? There should be financial repercussions, each affected individual should be awarded monetary compensation for their time.
I believe that since Chipotle was still using magstripe credit card readers that they are now financially liable for any fraudulent charges on your account.
A bit misleading- Chipotle is responsible for Chipotle transactions that get disputed as fraudulent. Not just any fraudulent charges (subsequent transactions occurring after a swipe at Chipotle).
There is legal recourse. It just isn't automatic. Same thing if you slip and fall at a Chipotle. They offer as little as they think they can get away with, often that's nothing.
You agreed not to get that when you got the card. And they agreed to pay you any money damages without arguing much. It's a good deal, but you can choose to use cash if you pref
Not a lawyer, but you probably do have cause for a lawsuit. Search "credit card data breach class action" and find lawyers/law firms who have handled similar cases in the past. If your data was compromised by a deep pocketed company and it was a large scale breach you can probably find a lawyer to file a class action on contingency.
Yes, they do. I still have to take time out of my day to audit the cards, challenge the payments, and then cancel the cards and get new ones, and update billpay everywhere else.
No, this generally doesn't involve immediately cancelling your existing card, sending you a new card and canceling the old one when it arrives is a much smoother experience.
Me experience is that at the first evidence of fraud or compromise the card is cancelled. The replacement arrives 7-10 days later. I'm sure it depends on the issuer, but banks in the US tend to a lowest common denominator customer experience.
