Chick-fil-A Warns of Account Exposure

The current version adds that affected accounts may have contained additional personal identifiers, including birthdays, phone numbers, and home addresses, and identifies North Carolina regulators as providing guidance. The core incident, remediation, and risk assessment otherwise remain substantially unchanged.

The update adds a firmer timeline and sharper scale details: Chick-fil-A determined potential account access on July 13, and reporting now ties the incident to specific state filing counts plus Washington, D.C. notices. It also clarifies the affected data set and remediation steps, including restored balances and added rewards.