Chick-fil-a Alerts Customers to Potential Data Breach Risks
WHO:
TechRadar - Chick-fil-A is the organization involved in the data breach.
Newsweek - Thousands of users in Texas are among those affected by the breach.
WHAT:
BleepingComputer - Chick-fil-A stated that the attackers targeted its website and mobile app using account credentials obtained from a third-party source.
BleepingComputer - The company confirmed that the breach may have affected 2,182 Texans and 39 residents of Massachusetts, with notifications also sent to residents of Iowa, the District of Columbia, Maryland, New Mexico, New York, North Carolina, Oregon, Vermont, and Rhode Island.
BleepingComputer - Chick-fil-A confirmed that it had previously experienced a similar incident in which over 71,000 customers' personal information was accessed between December 2022 and February 2023.
BleepingComputer - Chick-fil-A confirmed that it detected the attacks after identifying suspicious login activity to certain Chick-fil-A One accounts.
BleepingComputer - The company stated that it determined on July 13, 2026, that unauthorized parties may have accessed information in customers' Chick-fil-A One accounts.
BleepingComputer - Chick-fil-A reported that the breach may have affected an undisclosed number of customers, but it specifically noted that it impacts 2,182 Texans and 39 residents of Massachusetts.
BleepingComputer - Chick-fil-A stated that unauthorized parties launched an automated attack against its website and mobile application between June 17 and June 19, 2026.
BleepingComputer - The company confirmed that the attackers may have also gained access to birth dates, phone numbers, and addresses if stored in the compromised accounts.
Fast Company - Chick-fil-A has added rewards to affected accounts as a way of apologizing to customers.
BleepingComputer - Chick-fil-A reported that the unauthorized parties may have accessed customers' names, email addresses, Chick-fil-A One membership numbers, mobile pay numbers, QR codes, the amount of Chick-fil-A credit, and the last four digits of credit/debit card numbers.
BleepingComputer - The data breach impacts 2,182 Texans and 39 residents of Massachusetts, with notifications also sent to residents of Iowa, the District of Columbia, Maryland, New Mexico, New York, North Carolina, Oregon, Vermont, and Rhode Island.
TechRadar - Chick-fil-A revealed that hackers may have accessed customer account information.
Newsweek - The data that may have been accessed includes email addresses and mobile pay numbers.
WHERE:
TechRadar - The data breach has affected customers in Texas.
WHEN:
Newsweek - Chick-fil-A stated that it was targeted in June.
WHY:
TechRadar - The company is sending out notifications to alert customers about the potential data breach risks.
HOW:
BleepingComputer - The company logged out all impacted accounts, removed payment methods, and restored Chick-fil-A One account balances in response to the breach.
BleepingComputer - Chick-fil-A advised impacted users to change their passwords as soon as possible following the breach.
BleepingComputer - The company logged out all impacted accounts, removed payment methods, and restored Chick-fil-A One account balances in response to the breach.
BleepingComputer - The breach was caused by credential stuffing attacks, where attackers used automated tools to breach user accounts with stolen username/password pairs.
Newsweek - The breach involved unauthorized access to customer data.
(UPDATED July 23, 2026 08:47 UTC)
Chick-fil-A has confirmed that its website and mobile app were targeted by attackers using account credentials obtained from a third-party source, potentially affecting 2,182 Texans and 39 residents of Massachusetts. Notifications were also sent to customers in several other states, including Iowa, the District of Columbia, and New York. In response to the breach, the company logged out all impacted accounts, removed payment methods, and restored account balances for Chick-fil-A One users.
--
(UPDATED July 22, 2026 22:21 UTC)
Chick-fil-A has confirmed that it detected unauthorized access to certain Chick-fil-A One accounts after identifying suspicious login activity. The company determined that this breach may have affected an undisclosed number of customers, specifically noting that 2,182 Texans and 39 residents of Massachusetts were impacted. In response, Chick-fil-A is advising affected users to change their passwords as soon as possible.
--
(UPDATED July 22, 2026 20:24 UTC)
Chick-fil-A has reported that unauthorized parties launched an automated attack against its website and mobile application between June 17 and June 19, 2026, potentially compromising sensitive customer information such as birth dates, phone numbers, and addresses. In response to the breach, the company logged out all impacted accounts, removed payment methods, and restored Chick-fil-A One account balances. As a gesture of goodwill, Chick-fil-A is also offering rewards to affected customers as an apology.
--
(UPDATED July 22, 2026 19:25 UTC)
Chick-fil-A has reported a significant data breach, revealing that unauthorized parties may have accessed sensitive customer information, including names, email addresses, membership numbers, and the last four digits of credit or debit card numbers. The breach affects 2,182 Texans and 39 residents of Massachusetts, with notifications also sent to customers in several other states, including Iowa and New York. This incident was attributed to credential stuffing attacks, where attackers utilized automated tools to compromise user accounts using stolen username and password combinations.
--
(UPDATED July 22, 2026 14:45 UTC)
Chick-fil-A has reported a data breach that may have compromised customer account information, affecting thousands of users in Texas. The hackers potentially accessed sensitive data, including email addresses and mobile pay numbers, prompting the company to notify customers about the risks. This incident, which occurred after the company was targeted in June, involved unauthorized access to customer data.