# Chick-fil-A security incident may have exposed some customer account data

> **Open Intelligence Dossier** · First detected: 2026-07-22 21:07 UTC · Category: Business

## Executive Summary
Chick-fil-A warns that a security incident and cyberattack may have exposed customer account data across ten states.

## Intelligence Brief
According to extensive coverage from outlets including the New York Post, KHON2, Newsday, NBC Boston, Audacy, and Dallas News, a security incident and cyberattack has impacted Chick-fil-A customers across multiple regions. Reporting from Malwarebytes and WSB-TV indicates that loyalty accounts and Chick-fil-A One rewards program accounts were specifically targeted and hijacked using stolen passwords, leading to potentially leaked account information. While specific details on the total number of affected users remain broadly generalized in early reports, regional outlets such as OregonLive.com, WTOP, and WFAA note that individuals in ten states—including New York, Texas, Oregon, Maryland, and the District of Columbia—have received warnings from the restaurant chain regarding the breach. Media organizations have heavily emphasized the operational nature of the incident, tracking how suspicious account logins culminated in the confirmed data breach. Outlets like WAVY.com and WTVM.com detail that the company is actively communicating with impacted consumers.


Broad coverage from sources such as Yahoo, CBS News, and FOX 5 Atlanta provides actionable guides on what the cyberattack means for customers in specific areas like Maryland and what impacted users need to do next. The reporting outlines specific concerns for loyalty program participants whose credentials may have been compromised during the security event, though comprehensive lists of all affected states and exact figures regarding the scale of the leak are still emerging through ongoing updates from local and national newsrooms. The broader context provided by the coverage reveals a recurring pattern of digital security vulnerabilities hitting major restaurant rewards and loyalty platforms. Malwarebytes specifically highlights the mechanism of loyalty account hijackings via credential stuffing or stolen passwords, pointing to a wider systemic issue facing retail rewards programs. Because the incident involves the Chick-fil-A One rewards ecosystem, the breach directly touches users who store personal details and account data within the restaurant's digital application framework.


The reports frame this event not as an isolated technological glitch, but as part of an escalating wave of cyberattacks targeting consumer-facing corporate databases and mobile application accounts across various states. As the situation develops, future coverage will likely track further disclosures from the corporation regarding the full geographic scope of the incident and any additional states affected beyond the initial ten identified in reports. Observers will also be watching for official guidance on remediation steps for holders of hijacked loyalty accounts, as well as any regulatory responses or consumer advisories issued by state authorities.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| New York Post | New York customers account data exposed in Chick-fil-A security incident | [Source Link](https://news.google.com/rss/articles/CBMiswFBVV95cUxNY01LZi05Y010WXdtQU9teUNuUXYtcko4dl9fOU81ckVEdFYyRXk5eEFEWVBsX3Z1azBMbmlEYkpqS1lQblExTC01OG92ZEs1RWhMRHNNU196eU5sWXo0LTJQNF9iUTZsNFFuVS1KMGpPckF0NVlwNFk4NXpwdjV5TGNsQjViX0pEeFdHTjhTbk5OQXdjS0VuZ3dKQU02MmVYVkNnamttZ1JILVNKT1k3aEM4QQ?oc=5) |
| KHON2 | Chick-fil-A warns cyberattack may have exposed customer data in multiple states | [Source Link](https://news.google.com/rss/articles/CBMitwFBVV95cUxOSmx0N3J0Zml4dlVkWF93T1p2ZVo2Nlp0SnlPZXJjREhBX0lzNEpLS2RQMmM4cFMzZ2hjNHFoTHFrSC1kckg4Q1NaejFhTXRyVGVCNzBMWWtHV0ZnZlIwRHJQRXVvLWNjcmx0THRjLVYzQ2tKamc4MWhpWXJYWWZ2UTd2ckZ5Z09oT1lEa0VpYUwxYS1lNFdxTDlhZ1lMSTEzSHhaeWNwa3IzWmJNWEhQMW9WakNfdEk?oc=5) |
| Newsday | Chick-fil-A data breach may have exposed customer information in New York, 9 other states | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxOQ0xqTVpaTVI4LXJvRnAxbTlKNGI1UmN6eXV2Wm9NODI4bEF6dUUyNG5BdW9wcHBYcjNhSTQ1YWdYRjJFLTBaMm05ZmRmOVBUd0lGeno4bkV4OUFRSVJxTnRFWndFd2pTSHhObDVReDc1NnZKRUpyZDlqMVo4M24yNWdkcw?oc=5) |
| NBC Boston | Chick-fil-A customers in 10 states may have been part of data breach, company says | [Source Link](https://news.google.com/rss/articles/CBMipwFBVV95cUxOcDNma2ZmSURJRDZLVUloUHBEWW5OdlY4NURmYzlWQ1BPMVNEeGFMVzVud05VLXpkX29Va3JzWUFVSnBFb2VCb083aERUMEd0WVZQb2U3T3haZUoxSGE4Z1JVdElsdVJoMTlMVDdvS1VOcGwyT1hUTk9FdkQ3Z0RLb0YyQ19mTHEyT3hDMmFqVjlhR1JIek5XRnhhQ0RnRTNYZnpIaGJCMNIBrwFBVV95cUxQYk9Ic2ZZZTNxUUdsbUVDTExXUDNRSWlKNVhjV3FfVDh1Y2VtSENCbHZiYlQwR3pzQy1tMWY4TTVCU2VkX0NHTW9PRUpNREFJbFJEVko5a3NiREZ3MUhxSG9uUXRma3Q0cUxvQXBuNHRrYl93SjlRd3I2RVF1VnZodDllYVhKdVBPeGpUZjBhYjhiT2trdU5WZU5kMTJvZ1dBc0g0dVdKLWJsTkx) |
| Audacy | Data of thousands of Chick-fil-A customers in Texas potentially exposed due to data breach | [Source Link](https://news.google.com/rss/articles/CBMizgFBVV95cUxNVVd4YUozdVZPUHloWmxvcFBDbGpjOVhZNVhhclZxckYyXzFwOHhrWTJidUFSd1d0NXJXVkY3TkVEYWFyR1RndTFBeUNIVkljbTk3V2VUSzB3VnlnVkd6VUEwS0tnMmhGUkxkem95R0lqU05NcXdnRHk1M3J3T2NHLS1LTXVGTGtmWldDQUN3aTVWa2tFdlJZNW9KT1gxbEFGdHd6R0JmbncwenRucTgxQXdYT3c5M2xwVi1mM1liSEJ5TzRvZXNzRWpJNnVzZw?oc=5) |
| Dallas News | Texas Chick-fil-A customers’ data breached in cyberattack | [Source Link](https://news.google.com/rss/articles/CBMipgFBVV95cUxPWXhFRjJUQVJCRVp2YXRUU1lpZXJveWhGZkV6R3ZPVERNQWJ1T1ZoZDdxRndOX2xjTGlJNkdlbndNVnp6WXN6TUN6dWxqR0YxYzhMbU1BY2lFLWo1d3RycXBfY1JBRHJqc0ktM2hlbnlsLVBnT05BcGwzU0pJZEU5M2FPNDBEemRNWFRHejVhTW5RdTNoR2lJdUZnaEk1RC1nNXBlLUFB?oc=5) |
| Yahoo | Chick-fil-A warns customers following data breach in 10 states | [Source Link](https://news.google.com/rss/articles/CBMikwFBVV95cUxNd3RmOGFBcEJjQ1FqbDJwZGV5VW03QXF2UDVuZTZjN3VoQ2hSVnBnVlBzTnlFUkJ1cFRVLXR0R3R3N1poeTc2ZVNHaXVLVlcwYl9pclpGMDdXOWJZUHJvMDZHWUVjbTN2ZUo2ZlZCNGdJMU53X190ZjV1emhickt6Zjh1UGdCbHFLMGhlaXAxWWEyOVE?oc=5) |
| Yahoo | Chick-fil-A data breach: Here’s what customer information was exposed | [Source Link](https://news.google.com/rss/articles/CBMijAFBVV95cUxPMXphUGNyZzBkZy1PWGowWW44ODBlNVlwb29xTXBXam5BSVZ2TU9NRXplSHRwUFJCSGNVOTR0SXRqaHd5X1J5TWhhUVlxZlJ1dmxlV18xQTQzVUFRYklKSUtWODBWcWVfYnVYd3h4RVdiOTN5UC1NRFBNazl6elhGQW9VY1c2XzFuekpNaw?oc=5) |
| Malwarebytes | Chick-fil-A loyalty accounts hijacked using stolen passwords | [Source Link](https://news.google.com/rss/articles/CBMitwFBVV95cUxQTnVGeTRkcHFES1NTX1lQT3hNSDBKT3BhRzFvVGxDandPemRJSVpsbTVsUFo1Z0VEamNZUUpsdUN1bmdaR0dseGM0N0hYZ051NXN1dVlXeFVNZDVBQzQ5c2NKelBIWHBDQVJaVjUydWVrR3plZnJVOXBsYVdQWGZnRVJCdG9VNmlTZTJVT3pidldkV0FteS10dWM3N3l5NnJBSGd2RHlMdUVfaFRQTW1LMERCcWI2QTA?oc=5) |
| OregonLive.com | Chick-fil-A customers in 10 states, including Oregon, victims of June data breach | [Source Link](https://news.google.com/rss/articles/CBMiwgFBVV95cUxPdHNlTmwtUTlDSGpDS1RIbHhTdTl3RGZlYzJHQzVGWWFQTlh1NUNZM3Bab2lJb1dmWlBITDNaUHJtOW9idTVrck8tSkJQcndyMWZNZDdWckVWSlktU09HZjJqRGJMQW1BbnlBLVNmaXRaREhtZU9xdW80WFBDaURjbmF6MzR1TlRQdlBTSFpBdFlOcXNTQVRYM0dmOVVNMl9hdGllSWVxVUF0bkc4MHNLcVZGczVTb3o4VlpVUG9uSC12UQ?oc=5) |
| KHOU | Chick-fil-A customers in 10 states may have been part of data breach, restaurant says | [Source Link](https://news.google.com/rss/articles/CBMi1wFBVV95cUxPU1k2T19JQmUtZ2JJeFJhU1VJWEx1dkdyc3hDWjVsQVpmeUFXRUlSbVVrN08wejY2MnBJRS1jM3U5RmMzSEVOcWVTUEVESWhld0d1V1pRRE5OUEs4YXNMRXNSTFVvOUQyM1hUZlRuSXVIQi14bGZFdHJ5ZGdUWS1EQlNZYWwtY2JTY3RJT25yaHo3V2ZPY2dFV1RRdENCX2RxcDB3N0otWEtHTFF0b0JrMmtKM0VDZEpoT2JHN2JpMC1jZk1DamI0TUR0dUZkWEZnMWxRVGRBQQ?oc=5) |
| WAVY.com | Chick-fil-A confirms data breach following suspicious account logins | [Source Link](https://news.google.com/rss/articles/CBMiqgFBVV95cUxPT0E0NzNZSHBTSkV2S0hWbDRRSy13X1Z2NlF1OTk2U3JrYThPY3U1Zk9qc3NfODBhcVRzT2sxWkxnWG4xR1ZNN3RVZ3ZGQW5qdERrYUVNUjBTWDVZRDFrSTZnMjdPVERuNUFjSU1Bd0N1X3VXNk5RMEdsakxtN3ZYNTJ2dE53QnphMWNWM1JDc3ZpNnVucjVxaE1TaS1oaUg4amt1TUZoY0d1QdIBrwFBVV95cUxPVWMxV3RNTkpXVU5BWldlWU5rZlBLNnNDZldNSVB5cmtqTTlpLTRjdE5oTDFDTHVIM1NNYXNaTWpSNnRmcm1pOHJoVk1hSF9XWVVGZlUtWGN3SGpWN0N0cXByeGZScy02Q1FSRlBDNFlhV2Vjd0VXTzNYazFCTDlCOGFaUnQ3czV4TGdtZDhrY2w3SkNHa3JlRFRXcXItY0FjcVZSOWhhVE5) |
| FOX 5 Atlanta | Chick-fil-A data breach: What impacted customers need to do | [Source Link](https://news.google.com/rss/articles/CBMiZ0FVX3lxTE9NV2FIUVA1REl1aDVpMGxua3YwM3NseW1LbHgyaFNYeTVVY2RCbktEaXl0N1hiSkV1YjhwSE85QUtMME1uRjNEUXp5b3BRN293MWREUmxadEZEb1Jmb1d0dWRhWXVwdGs?oc=5) |
| CBS News | What does the Chick-fil-A cyberattack mean for Maryland customers? | [Source Link](https://news.google.com/rss/articles/CBMikAFBVV95cUxPdEYxNjhQZlRxUjJVT2dkTmI2TE5INlV1ejFMQXYxUnJTUlo0VFhnaUFZNl9IMkxrVkFvSG40VUlzWklFbVhvMjNKTGtNcUg2ZXBWZ1VoOVJQVmdOaURVS1dob2NuV3QtVlBsN0Utck1VZGRGc1BvaDlDWUFmRk96Z2pQajBDaDNidVlrZ0x1Tmg?oc=5) |
| WTOP | Chick-fil-A alerts DC, Maryland and other customers of data breach | [Source Link](https://news.google.com/rss/articles/CBMiqAFBVV95cUxOLUpMT01oT1ZTZTlFNXcyY0paMHNScE01NlhkeTJDUGpNaW9xenVQREM0WWpldEZEOGduZE5kMEJ4TzVxUENmb3VZRTdUZXBCcG5KenprNkgyVFY4R2xrMjc2RS10eXdnUFYwT1ZrRjZDeW13S053YXozYkpaNXZsZUxBUTgyUXRxM0w4TDdNaVVxVWhwd2JVbks5cXZ0aTFzbmc5RENOdGg?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-07-22/chick-fil-a-security-incident-may-have-exposed-some-customer-account-data*