- Chick-fil-A confirmed a credential stuffing attack between June 17 and 19, which breached thousands of accounts
- The exposed data includes names, emails, membership numbers, payment details, birthdays and addresses.
- The company logged out users, removed payment methods, reset balances, and notified several US states.
Chick-fil-A is notifying customers of a concerning cyber incident involving the leak of confidential information.
In a data breach notification letter sent to affected customers, the fast food giant said it recently identified “suspicious login activity,” prompting it to investigate further.
That investigation determined that unidentified threat actors executed a credential stuffing attack between June 17 and June 19, 2026, successfully breaching an unknown number of accounts.
Sign out everyone
A credential stuffing attack occurs when threat actors use automated systems to try thousands of username and password combinations on a service to see which ones work. Login credentials are often obtained in advance on the black market.
Since attackers broke into people’s accounts, the data found inside was exposed. According to the notification letter, that data includes names, email addresses, Chick-fil-A One membership numbers, mobile payment numbers, QR codes, the last four digits of payment cards and the amount of Chick-fil-A credit.
“The information may have included the month and day of your birthday, phone number and address,” the company added.
After discovering the intrusion, Chick-fil-A logged everyone out of their accounts and deleted all stored payment methods. It also restored affected customers’ account balances and, in some cases, also added rewards to victims’ accounts.
We don’t know exactly how many people are affected by the breach, but it’s definitely in the thousands.
beepcomputer found that the company notified the Texas Attorney General that the breach affected 2,182 of its citizens. Similar notices were sent to Iowa, the District of Columbia, Maryland, Massachusetts, New Mexico, New York, North Carolina, Oregon, Vermont and Rhode Island.
Chick-fil-A is one of the largest fast-food restaurant chains in the U.S., operating more than 3,000 restaurants throughout the United States, Canada, and Puerto Rico. It employs more than 200,000 people and generated around $10.3 billion in annual revenue in 2025.
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to receive news, reviews and opinions from our experts in your feeds.
