Chick-fil-A says some customers’ information exposed in data breach

(Gray News) - Chick-fil-A is asking some customers to reset their passwords after the company experienced a data breach.

The fast-food company sent out letters to affected customers on July 20, 2026. In the letter, Chick-fil-A said it noticed suspicious login activity on certain Chick-fil-A One Loyalty accounts and launched an investigation.

Through the investigation, it discovered that from July 17 to July 19, “unauthorized parties” had used account credentials obtained by a third party to launch an attack on Chick-fil-A’s website and mobile apps.

“We recently identified a security incident that may have affected a limited number of Chick-fil-A One Loyalty accounts. Upon discovering the issue, we took steps to immediately address, secure and restore accounts, and we are communicating directly with all customers who may have been impacted,” a spokesperson for the company said

According to Chick-fil-A, the parties gained access to customers’ names, email addresses, Chick-fil-A One membership numbers and the last four digits of credit or debit card numbers. Any additional information, such as birthdays and addresses saved to the account, was also included.

“We sincerely apologize for any inconvenience or concern this situation may have caused and remain committed to maintaining the trust our guests place in us every day,” the spokesperson said.

In response to the breach, Chick-fil-A said it forced logouts on affected accounts and removed any saved payment methods. It said it also restored affected Chick-fil-A One balances and added additional rewards.

It recommends customers reset their Chick-fil-A passwords and keep an eye on credit reports and account statements for any further suspicious activity.