(Reuters) - Chipotle Mexican Grill Inc said on Friday hackers used malware to steal customers card data, including account number, expiration date and internal verification codes, from payment systems at some of its restaurants between March 24 and April 18.