Chick-fil-A Fraud Alert

recall

By Nikki

Chick-fil-A issued a data breach warning regarding a cyberattack that targeted its Chick-fil-A One loyalty accounts.

Between June 17 and June 19, 2026, unauthorized hackers launched an automated “credential stuffing” attack against Chick-fil-A’s website and mobile application. Hackers used login information (emails and passwords) stolen from other third-party data breaches to gain entry into accounts where users reused the same password.

Impacted Data & Fraud Details

According to notifications submitted to state Attorneys General, the hackers may have accessed the following personal details:

  • Account Info: Customer names, email addresses, and Chick-fil-A One membership numbers.
  • Payment Details: Mobile Pay numbers, QR codes, and the last four digits of stored credit or debit cards.
  • Rewards & Balances: Gift card balances and accumulated Chick-fil-A rewards credits (some users reportedly had their balances drained).
  • Profile Details: Birthdays (month/day), phone numbers, and physical addresses if saved on file

Action Taken by Chick-fil-A

To secure customer accounts and mitigate fraud, Chick-fil-A deployed the following immediate responses:

  • Forced Logouts: Disconnected all active sessions on affected accounts.
  • Password Resets: Forced immediate password resets for compromised users.
  • Payment Removal: Wiped out all saved payment methods from the app.
  • Balance Restoration: Refunded stolen Chick-fil-A One account balances and added extra rewards as an apology.

Steps You Should Take Now

If you use the Chick-fil-A app or website, cyber experts and the Mass.gov Data Notice recommend taking immediate protective steps:

  1. Change Your Password: Create a strong, unique password for your Chick-fil-A One account.
  2. Update Reused Credentials: If you used that same password on any other app or website, change it there immediately.
  3. Monitor Statements: Review your bank and credit card statements for any unapproved or fraudulent transactions.
  4. Watch for Phishing: Be alert to fake emails, texts, or calls claiming to be Chick-fil-A offering “bonus rewards” or asking to verify your payment card details.
  5. Contact Support: If you have questions, call Chick-fil-A’s customer helpline directly at 888-201-5329 (Monday–Friday, 9 a.m. to 9 p.m. ET)