The 27 attorneys general involved in the settlement said that Sabre responded poorly to the incident, particularly in notifying people that their information might be compromised.
Chipotle is just one of a slew of businesses targeted by a sophisticated hacking group with suspected ties to cybercrime gangs operating in Eastern Europe.