Skip to content

Chick-fil-A

2 breaches13K affected in allRetailchick-fil-a.com

BreachAffected
Chick-fil-A One loyalty accounts hit by credential stuffing, 13,322 affectedJul 202 months agoCredential stuffing13K
Automated credential stuffing attack compromises Chick-fil-A One accountsMar 2, 20233 years agoCredential stuffingUnknown
About

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

  • 2026-09-25 · Chick-fil-A, 2026-07-20 · source: https://ago.vermont.gov/categories/security-breach-notices
  • 2026-09-25 · Chick-fil-A, 2026-07-20 · disclosed: 2026-07-20
  • 2026-09-25 · Chick-fil-A, 2026-07-20 · source_type: official
  • 2026-09-25 · Chick-fil-A, 2026-07-20 · source_url: https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage
  • 2026-09-25 · Chick-fil-A, 2026-07-20 · status: confirmed
  • 2026-09-25 · Chick-fil-A, 2026-07-20 · verified_by: tx-ag
  • 2026-09-25 · Chick-fil-A, 2026-07-20 · verified: 1
  • 2026-09-25 · Chick-fil-A, 2026-07-20 · data_types: ["names","emails","payment-card","other","financial","addresses"]
  • 2026-09-25 · Chick-fil-A, 2026-07-20 · disclosed: 2026-07-21
  • 2026-09-25 · Chick-fil-A, 2023-03-02 · sector: retail
  • 2026-09-25 · Chick-fil-A, 2023-03-02 · attack: credential-stuffing
  • 2026-09-25 · Chick-fil-A, 2023-03-02 · data_types: ["names","emails","financial","other"]
  • 2026-09-25 · Chick-fil-A, 2023-03-02 · discovered: 2023-02-12
  • 2026-09-25 · Chick-fil-A, 2023-03-02 · summary: Chick-fil-A said attackers used login credentials obtained from a third-party source in an automated attack on its website and app from December 2022 to February 2023. Accessed Chick-fil-A One accounts could reveal names, emails, membership
  • 2026-09-25 · Chick-fil-A, 2023-03-02 · title: Automated credential stuffing attack compromises Chick-fil-A One accounts
  • 2026-09-25 · Chick-fil-A, 2026-07-20 · added
  • 2026-09-25 · Chick-fil-A · domain: chick-fil-a.com
  • 2026-09-25 · Chick-fil-A, 2023-03-02 · added
  • 2026-09-25 · Chick-fil-A · added

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.