Talk about burying the lede: Partway into a presentation on Chipotle’s financial success earlier this week, the company’s chief financial officer informed the audience that the burrito chain’s payment system had likely been hacked.

“We want to make our customers and investors aware we recently detected unauthorized activity on a network that supports payment processing for purchases made in our restaurants,” Jack Hartung reportedly told analysts.

Company representatives say they’re investigating all credit-card transactions run between March 24 and April 18. They’ve notified credit card companies, who should, in turn, inform their customers if there’s a chance their information has been compromised.

“Consistent with good practices, consumers should closely monitor their payment card statements,” the company said in a statement. “If anyone sees an unauthorized charge, they should immediately notify the bank that issued the card. Payment card network rules generally state that cardholders are not responsible for such charges.”

Not one to waste a promotional opportunity, Chipotle also notes that they will soon begin offering their first-ever dessert item: deep-fried tortilla strips with honey, sugar, and a caramel dipping sauce.