AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Chick-fil-A Data Breach
Coverage from Newsday, ConsumerAffairs, and others
Chick-fil-A reported that attackers used credentials obtained from a third party to target Chick-fil-A One accounts through its website and mobile app from June 17 to June 19, 2026.
The company said potentially exposed information included names, email addresses, membership and mobile-pay details, QR codes, gift-card or account balances, partial payment-card numbers, and, where saved, phone numbers, addresses, and birth dates. Chick-fil-A notified customers in multiple states and Washington, D.C., forced affected accounts to log out, removed stored payment methods, restored balances, reset passwords, and urged customers to watch for fraud and identity theft.
Looking Back
16 Day Timeline
Jul 20
Jul 23
Jul 25
Jul 28
Jul 30
Aug 2
Aug 4
All Articles69 articles
Important
Chick-fil-A disclosed a June 17 to 19 cyberattack on its Chick-fil-A One site and app, potentially exposing loyalty data across New York and other states.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A recently disclosed that attackers used credentials from previous breaches to access some Chick-fil-A One accounts through automated credential stuffing against the online loyalty service.
8/4/2026 • Data Breaches & Exposure Events • General
Chick-fil-A reported credential stuffing attacks on its website and mobile apps between June 17 and June 19, 2026, leading to customer data exposure and state breach notifications.
7/27/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in 10 states after credential stuffing using leaked credentials potentially accessed a limited set of Chick-fil-A One loyalty accounts.
7/24/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers on July 20, 2026 that a credential-stuffing incident may have exposed Chick-fil-A One account data from June 17 to June 19.
7/24/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers on security incident remediation steps in Washington, D.C. and nine states after a June 17-19 automated attack used third-party-obtained credentials.
7/24/2026 • Data Breaches & Exposure Events • General
Chick-fil-A disclosed a June 17 to June 19 cyberattack using third-party credentials that potentially exposed loyalty account data across multiple U.S. states.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple states in 2026 after a June 17-19 cyberattack may have accessed Chick-fil-A One account data, including login credentials and partial payment details.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple US states in 2026 after an automated attack on Chick-fil-A One may have exposed account and payment-related data.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified Chick-fil-A One members in multiple U.S. states after a June 2026 account-takeover attack possibly exposed loyalty and payment-adjacent data.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple U.S. states in July 2026 after unauthorized parties may have accessed Chick-fil-A One account data via third-party credentials.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A informed Chick-fil-A One loyalty members in multiple states in July 2026 that an automated cyberattack may have exposed account data.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple states and Washington, D.C. on July 20, 2026, after an automated attack on Chick-fil-A One accounts may have exposed personal data.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified loyalty customers across multiple states and Washington, D.C. in July 2026 after a cyberattack may have accessed Chick-fil-A One account data.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple US states after an automated June 17-19 2026 attack using acquired Chick-fil-A One credentials potentially exposed rewards account data.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified Chick-fil-A One customers in the U.S. after an attack from June 17 to June 19, 2026 may have exposed loyalty account data.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A disclosed a June 17-19 credential-stuffing incident affecting customer accounts in 10 states and Washington, D.C., with notifications issued in July.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A reported potentially compromised Chick-fil-A One accounts after credential-stuffing logins between June 17 and June 19 affected customers in multiple states.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers after a June 17-19, 2026 cyberattack potentially exposed loyalty account information in multiple states including North Carolina.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified Chick-fil-A One members in multiple U.S. states in 2026 after a cyberattack between June 17 and June 19 may have exposed account data.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A reported June 17-19 unauthorized access to Chick-fil-A One accounts via third-party credentials affecting customers across multiple U.S. states.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A disclosed a cyberattack between June 17 and 19 that potentially exposed loyalty account data for over 2,000 customers in Texas and other states.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified Chick-fil-A One members in multiple US states in 2026 after an automated website and app attack may have accessed account data using third-party credentials.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A reported suspicious logins on Chick-fil-A One Loyalty accounts, disclosing potential customer data exposure in Washington, D.C., and several US states.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A issued breach notifications in multiple U.S. states in July 2026 after unauthorized access to Chick-fil-A One data from a June website and app hack.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple U.S. states in 2026 after a credential-stuffing attack accessed Chick-fil-A One loyalty-account data from leaked credentials.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in Massachusetts after unauthorized access to some Chick-fil-A One loyalty accounts occurred between June 17 and June 19, 2026.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers on July 20, 2026 to reset passwords after third-party obtained credentials led to a Chick-fil-A One Loyalty account breach.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple US states in July after June 17-19 hacking of Chick-fil-A One may have exposed account data and last-four card digits.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in Massachusetts and other states in July 20 guidance about unauthorized access to Chick-fil-A One accounts from June 17-19.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in July 2026 that a June 17 to June 19 automated attack may have accessed Chick-fil-A One account data nationwide.
7/22/2026 • Data Breaches & Exposure Events • General
Massachusetts posted July 20 notice after Chick-fil-A reported unauthorized access to Chick-fil-A One accounts between June 17-19, potentially exposing customer data across multiple states.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified Chick-fil-A One members in Washington, D.C., Maryland, and other states after a June 2026 attack used third-party credentials to access accounts.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in 10 states and Washington, D.C. after a June 17-19 cyberattack potentially exposed loyalty account and partial payment details.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple US states after a June 17-19 hack of the website and app exposed Chick-fil-A One account data.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A reported a June 17-19, 2026 Chick-fil-A One attack that may have exposed customer emails, passwords, and card-adjacent identifiers in New York and other states.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers on July 20, 2026 of a limited Chick-fil-A One loyalty account breach tied to third-party credential misuse.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A reported a June 17-19 attack potentially exposed Chick-fil-A One personal data and partial card details in Maryland and nine other jurisdictions.
7/22/2026 • Data Breaches & Exposure Events • General
Massachusetts and multiple states issued notices after a June 17-19 Chick-fil-A website and app hack exposed Chick-fil-A One member account data.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers after a June 17 to June 19, 2026 automated cyberattack potentially exposed personal details and Chick-fil-A One account data.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A disclosed a June 17-19 breach of Chick-fil-A One accounts to the Massachusetts attorney general after unauthorized access to customer identity and last-four payment data.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A disclosed a June 17 to June 19 breach impacting about 2,200 Texas loyalty customers after an automated attack used third-party-obtained credentials.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A confirmed July 13, 2026 potential access to names, emails, and credit card last four digits for some Chick-fil-A One accounts after a credential-based attack in June 2026.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple U.S. states and Washington, D.C. after July 13 findings that credential-stuffing may have accessed Chick-fil-A One account data.
7/20/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in 10 states and Washington, D.C. after unauthorized access to the Chick-fil-A One website and mobile app between June 17 and June 19.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple U.S. states in July 2026 after a Chick-fil-A One website and app hack exposed names, emails, and card last four digits.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A warned customers in the United States on July 13, 2026, that credential-stuffing attacks may have accessed Chick-fil-A One loyalty accounts targeted through the company website and mobile app.
7/29/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified Chick-fil-A One members on July 20 about suspicious logins from third-party credentials, potentially exposing personal and payment-related data.
7/24/2026 • Data Breaches & Exposure Events • General
Chick-fil-A detected credential stuffing against Chick-fil-A One accounts between June 17 and June 19, exposing personal and loyalty data for 13,322 customers.
7/24/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in June about a website and mobile app cyberattack that exposed Chick-fil-A One loyalty data in Georgia, Massachusetts, and Texas.
7/23/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers July 20 after a June 17-19 incident potentially exposed Chick-fil-A One loyalty data across multiple U.S. states.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in multiple states on July 20 after an automated cyberattack targeted Chick-fil-A One accounts and exposed personal data between June 17 and June 19, 2026.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified multiple states after credential-stuffing attacks compromised Chick-fil-A One accounts between June 17 and June 19, 2026.
7/22/2026 • Data Breaches & Exposure Events • General
Interesting
Chick-fil-A notified customers in Texas and Massachusetts after a June credential-stuffing attack accessed information from 2,221 Chick-fil-A One loyalty accounts.
8/3/2026 • Data Breaches & Exposure Events • General
Chick-fil-A reported in June 2026 that an automated attack compromised some Chick-fil-A One accounts, affecting customers in Texas and Massachusetts and prompting a potential class-action investigation.
8/3/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified 2,221 customers in Texas and Massachusetts after credential-stuffing attacks accessed some Chick-fil-A One accounts between June 17 and June 19.
8/3/2026 • Data Breaches & Exposure Events • General
Chick-fil-A reported that credential stuffing compromised some Chick-fil-A One accounts between June 17 and June 19, prompting customer notifications and a possible Florida class-action lawsuit.
8/3/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in Texas and Massachusetts after credential-stuffing attacks accessed information from 2,221 Chick-fil-A One accounts, while Dapeer Law, P.A. investigated potential claims.
8/3/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in North Carolina, eight other states, and Washington, D.C., in July that a June cyberattack accessed limited loyalty accounts using compromised third-party credentials.
7/30/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in nine states and Washington, D.C., on July 20 that a June cyberattack may have exposed loyalty-account information.
7/30/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers in North Carolina, eight other states, and Washington, D.C., in July that a June cyberattack may have exposed loyalty-account information.
7/30/2026 • Data Breaches & Exposure Events • General
Chick-fil-A warned customers in multiple states and Washington, D.C. on a July 2026 breach tied to unauthorized access of Chick-fil-A One account data from June 17-19.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified certain Chick-fil-A One loyalty members after suspicious logins linked to a June 17-19 credential-based attack affected accounts in multiple states and Washington, D.C.
7/22/2026 • Data Breaches & Exposure Events • General
Former Fairlife employee and Chick-fil-A customers filed proposed federal class actions alleging data exposures involving employee records and loyalty accounts in United States courts.
8/3/2026 • Data Breaches & Exposure Events • General
Chick-fil-A disclosed unauthorized access to Chick-fil-A One accounts between June 17 and June 19 from leaked credentials, starting in Atlanta.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A disclosed a security breach affecting Chick-fil-A One Loyalty accounts, with potentially limited account impact, and began customer communication and account restoration.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers on July 20 after suspicious login activity and an automated credential-based attack on Chick-fil-A One accounts occurred June 17-19, 2026.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A reported a data breach on July 20, with Massachusetts filings listing 39 affected customers and Texas filings listing 2,182.
7/22/2026 • Data Breaches & Exposure Events • General
Chick-fil-A notified customers of a credential-stuffing breach affecting loyalty and ordering accounts after automated login attempts succeeded.
7/24/2026 • Data Breaches & Exposure Events • General