[frikk]

My area was hit, and I did get hit with credit card fraud. I suspected a different vector (shady medical vendor and coincidental timing). The card that got hit was indeed used at Chipotle, but a week after the supposed "time range" indicated on the security site. Maybe the time range isn't absolute.

[tyingq]

Typically, the hackers that get the data sell it off, versus using it personally. That can take a while.

[frikk]

I just mean that I didn't use my card during the time period, but a week later.

[heartbreak]

I used my card multiple times at multiple affected locations in four states, and I haven't seen any fraud on the card. Just a datapoint. Perhaps yours really was that shady medical provider.