- Chick-fil-A confirmed a credential attack between June 17 and 19 that compromised thousands of accounts
- Exposed data includes names, e-mails, membership numbers, payment information, birthdays and addresses
- The company logged users out, removed payment methods, restored balances and notified several US states
Chick-fil-A is notifying its customers of a troubling cyber incident in which their sensitive information has been leaked.
In a data breach notification letter sent to affected customers, the fast-food giant said it recently identified “suspicious login activity,” prompting it to investigate further.
This investigation determined that unidentified threat actors conducted a credential attack between June 17 and June 19, 2026, which successfully breached an unknown number of accounts.
Logs everyone out
A credential stuffing attack is when threat actors use automated systems to try thousands of username/password combinations against a service to see which ones work. The login information is usually obtained on the black market in advance.
Since the attackers broke into people’s accounts, the data found inside was exposed. According to the notification letter, this data includes names, email addresses, Chick-fil-A One membership numbers, mobile payment numbers, QR codes, the last four digits of payment cards and the amount of Chick-fil-A credit.
“The information may have included the month and day of your birthday, phone number and address,” the company added.
After it discovered the intrusion, Chick-fil-A logged everyone out of their accounts and removed all saved payment methods. It also restored affected customers’ account balances and in some cases added rewards to victim accounts as well.
We don’t know exactly how many people are affected by the breach, but it’s certainly in the thousands.
Bleeping Computer found that the company notified the Texas Attorney General that the breach affected 2,182 of its citizens. Similar notices went out to Iowa, the District of Columbia, Maryland, Massachusetts, New Mexico, New York, North Carolina, Oregon, Vermont and Rhode Island.
Chick-fil-A is one of the largest fast food restaurant chains in the United States, operating more than 3,000 restaurants throughout the United States, Canada and Puerto Rico. It employs over 200,000 people and generated around $10.3 billion in annual revenue by 2025.
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews and opinions in your feeds.
