Malware that infected Chipotle hit customers across the US, firm reveals