Chick-fil-A Data Attack Potentially Exposes Customer Information
Chick-fil-A's website and app were targeted in a data attack between June 17-19, potentially exposing customer names, email addresses, membership numbers, QR codes, last four digits of credit card numbers, account credits, and optionally, birthday, phone number, and address. The…
Atlanta, GA, July 22, 2026 —
Atlanta, GA – Chick-fil-A experienced a data security incident affecting its website and mobile application between June 17 and June 19. The company has indicated that customer information may have been exposed during this period.
The types of information potentially accessed include customer names, email addresses, membership numbers, and QR codes. Additionally, the last four digits of credit card numbers and details regarding account credits could have been compromised. In some cases, optional information such as birthday, phone number, and physical address may also have been involved.
In response to the incident, Chick-fil-A took immediate measures to protect customer accounts. The company enforced logouts for all users across its platforms and removed any stored payment methods associated with accounts. Customers have been advised to remain vigilant and monitor their financial accounts for any signs of suspicious activity.
The full extent of the data breach and the exact number of customers affected have not been disclosed. Chick-fil-A, headquartered in Atlanta, has not provided further details regarding the nature of the data attack or the specific vulnerabilities exploited.
Story summarized from the original created by Atlanta First News staff on www.atlantanewsfirst.com, see more information here.
