# Chick-fil-A data breach exposes personal information from loyalty accounts

> **Open Intelligence Dossier** · First detected: 2026-07-22 17:07 UTC · Category: Business

## Executive Summary
Chick-fil-A is warning customers across 10 states after a credential stuffing attack targeted 'Chick-fil-A One' loyalty accounts in June.

## Intelligence Brief
Chick-fil-A has confirmed a security incident that resulted in the exposure of personal information belonging to customers. The breach specifically targeted the 'Chick-fil-A One' loyalty accounts. According to reports, the incident occurred during a cyberattack in June, leading the restaurant chain to warn affected users that their account data may have been compromised. The company has acknowledged that some customer information was exposed as a direct result of this security failure, marking a significant disruption to the brand's digital loyalty ecosystem. Coverage of the event is widespread across multiple news outlets.


CBS News and 10TV report that the warning has been extended to customers in 10 specific states. USA Today and Fox Business characterize the event as a cyberattack and a security incident, respectively, while AJC.com explicitly states that personal information from loyalty accounts was exposed. Yahoo provides further technical detail, identifying the specific nature of the breach as a credential stuffing attack, while qz.com confirms the timing of the attack took place in June. To understand the context of this breach, it is necessary to note the role of the 'Chick-fil-A One' app in managing customer rewards and personal data. A credential stuffing attack typically involves using lists of leaked usernames and passwords from other sources to gain unauthorized access to accounts.


This specific attack hit the loyalty app, meaning the stakes involve the potential theft of personal information tied to these accounts. WSFA and AZ Family have both highlighted the restaurant's confirmation that customer information was indeed exposed during this process. Moving forward, the focus remains on the scale of the exposure and the response for users in the 10 affected states mentioned by CBS News and 10TV. Monitoring will center on whether Chick-fil-A provides further details regarding the specific types of personal information compromised. Coverage does not yet specify the total number of accounts breached or the exact list of the 10 states involved, but the company's ongoing warnings to its customer base indicate that the security incident is currently being managed and communicated to the public.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| USA Today | Cyberattack may have exposed some Chick-fil-A customer data | [Source Link](https://news.google.com/rss/articles/CBMiogFBVV95cUxQYUEyWG40aXBDSWxacW9OVk95MFd0UmpMd2VRaGZsN2pITHJaUDJIV00za2pVM2w4UGxWWTRqc29PZVozZi1zQjFxR3JoTkYtd29QSmtEaTFUX3kwdFdPOGFtSG1pYklyN1hPb1pLejlQX0F3akdaMkVJdHlLTnVWUmJmYkpQTkc0ZXdJWTA3LWxsemV1Q1dhYng2cjZEN0VxY3c?oc=5) |
| WSFA | Chick-fil-A says some customers’ information exposed in data breach | [Source Link](https://news.google.com/rss/articles/CBMinAFBVV95cUxNWHhhcEN4TFBGRlpZNTNvUVltQmFYS0VSZmVUZGcxMUdmNUxVZFVjTWM0VVpUaUpEYzk0SVlNX2VsVFViV2ZJcGRhLVgtaUxRbm9ZLXhLNDBpMDlaeXZTQ25VblE2VTBhT2NsVXA5dDFjdlFmRDdyLVFCOWllR2hDT3BZMVpLUDJRU3g1ZFd2cmtFMm5aM2xqU1hFMjE?oc=5) |
| 10TV | Chick-fil-A customers in 10 states may have been part of data breach, restaurant says | [Source Link](https://news.google.com/rss/articles/CBMi1wFBVV95cUxNY3p1N19LMExXYmZjb0lnSE1meG9sYkJDM08wU1MxREQ4ZUJySHFldjZNaGxyV0Q5X0VrdW9HYnFpMV9aUktpSzhPTmZ0RnhFOW4tbVR4TGpPY2JwYmkxazg5LVVRdnpROE94YW5hVUxFN2RIYTV3YV9vcUNxM0puekNTb2Rfei1jY0xhVVNqU3FQVE5ZOUlxdWxLUGtJaDFyeGVVQWV0NENSUWtUcWJUakxWTENKRWxQM2U3TDU5cHNMUGQ3dTRRZUoxZmJMc2wtWG9vUW5YUQ?oc=5) |
| CBS News | Chick-fil-A warns customers in 10 states after cyberattack exposed some loyalty accounts | [Source Link](https://news.google.com/rss/articles/CBMixAFBVV95cUxObEpfZ1BoaDBPSVZWX3V1c2RBNEJ6bUZyMmlEUWdhc2xjZzduUnpEZlY3WTlnaVBmbThtUk9QWG53QnltdTRKMGd0OTBRV2ZfZklaWS0teENPTkNmY041NUNnb3RudjhUOHV0b21QbldIbHhNM0VNVUh2VGtQZ0tCcndrQnlHUmxDTDFxeXg5ckFLZlFNZi02WmM4dWw1YjNqVUFJLXk3MWR2d01vWEVLVjZyQURLUXk1VlhmcWE2SXJOdFFD?oc=5) |
| AJC.com | Chick-fil-A data breach exposes personal information from loyalty accounts | [Source Link](https://news.google.com/rss/articles/CBMisgFBVV95cUxQempzUDZJVEFFWmRNX1VuUUkySmMyS01XMEhQd09JZVNtUVhhRzFmdkp6cWpiejEySlBCNlJ6RjVwRUtXalAtZzM1elZSVFp5UTdhM0NRdVRhQWNRUUlXSjE2eUFsUkt6RUoxWXVJTTVkbm92Q252RkN3aUJGX1FhOFdVdmtnV2FGUzV0N3BvWmRBUUpLdm1RbFVLbHB1cHZmd01sNHdHTFRiRndJMlRxdTNR?oc=5) |
| Fox Business | Chick-fil-A security incident may have exposed some customer account data | [Source Link](https://news.google.com/rss/articles/CBMirAFBVV95cUxOUk5VM2RBSHFlcm9adzhKM21KTmIyRmxBN29ZUXdOV3VpZWd4aHI4cXY0NWJyNVBrLUdoXzY2OFdpSnVqa3lzLXpxT1lsVnFMUF83S3VaOWhsUWxDSk1XWTZsbmJZR3ZGZTQwLXhGWS1aVVVCRXVtWFlpWWx1anc1dU5LdDVkRmRLanltSHB3R1AwNU1PSmJ4MWRjWXJYODJJTmExelhxbFgta3dZ0gGyAUFVX3lxTE5YNGtzZ1BhOUlpQ3F5SHJGeTRka2NSTVUydnptVER3ZjlPQ0pSeGc5clZFaVpuZXE2bGxQa19vcF9kQTZHSVpVVlVCQVFQQTl2bGdweGFGTFF5OHA4alROU21USGxLZHBaV1ZSb3ZUblNKbFoxWndRdmJWbnh3b21BNEVyN0V5YjNwcmJBay1sUmVPZTJQNVE2SFkxYW92S0dVRmZhVlk) |
| Yahoo | Data Breach: ‘Chick-fil-A One’ Loyalty Accounts Hit By Credential Stuffing Attack | [Source Link](https://news.google.com/rss/articles/CBMihgFBVV95cUxNMDM5aXJ0QTQ2cVVTdHBwR2tLejA4aFVXRGxDWWowRmVZUEJJMlFsWU10bUlqUzRxY3hHeE9ldWMtamhSZ2N2WnZ5TlZZbWJ6aGFxR3BxZlgxX2puX2N4b3IwTXQ3LWRnNkR6TDFrWkc5ak5IV2JJYVd4TVpGdy1qSnhMY3F0QQ?oc=5) |
| qz.com | Chick-fil-A data breach hits loyalty app accounts in June attack | [Source Link](https://news.google.com/rss/articles/CBMiigFBVV95cUxQWGRGTDh0Mmlsdlg2dnlRQ2FYVlc3ZHF4LXlVcWRTWUtsMi1NMzl0bm9kb1l6aTUtTW83OU9ncjBOamJWaW1PQkFxb3Z5SkVYVDU0RElZMVRyZGVJTVNBRlJyYlJiSk5ZajJPWC05VXpIMFV3ZTZ5eHFFQXc1Q3lpbXRtdGZObDZBVlE?oc=5) |
| AZ Family | Chick-fil-A says some customers’ information exposed in data breach | [Source Link](https://news.google.com/rss/articles/CBMiogFBVV95cUxQY3hQc3pJcFcwbWctNE45VWo5ZjVLb0lDYzlPSmxWMnptUElydUlQNjNwUkNDQXBIaTU5VTl0UVhFTDNaYVdkZFo3SnlDMFk2YlptMFozTUs3dWhFSDJuUWcyVzFNdjMxV05wN2hheU1udkdQTnRtZWNBdW5FUWduMEF3aUVTck9uRG5kMk5vSUFXdUN2aW01Wl9MT1djOVV3NFE?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-07-22/chick-fil-a-data-breach-exposes-personal-information-from-loyalty-accounts*