CHICK-FIL-A, INC.

Chick-fil-A, Inc. based in Atlanta, Georgia, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-07-13 and reported on 2026-07-21. 2,182 Texas residents were affected. 13,322 individuals affected in total. Types of information involved: Name of individual;Address;Financial Information (e.g. account number, credit or debit card number). Consumers were notified via Email.

Chick-fil-A, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-07-20. The reporting organization type is Other Commercial. 2 Vermont residents were affected. Categories of data breached: Financial Account Codes, Credit and Debit Account Info.

Chick-fil-A, Inc. notified Massachusetts customers of a data security incident involving unauthorized access to Chick-fil-A One accounts. Between June 17 and 19, 2026, attackers used stolen credentials from a third-party source to access customer data, including names, emails, membership numbers, and partial credit card details. Chick-fil-A reset passwords, removed stored payment methods, and restored account balances.

Chick-fil-A, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-03-02. The breach occurred from 12/18/2022 to 2/12/2023. 31 Montana residents were affected.

Chick-fil-A, Inc. disclosed that unauthorized parties launched an automated attack against its website and mobile application between December 18, 2022, and February 12, 2023. The attackers used account credentials (email addresses and passwords) obtained from a third-party source to access Chick-fil-A One accounts. Affected data included names, email addresses, membership numbers, masked payment card numbers, and potentially phone numbers and addresses. Chick-fil-A responded by resetting passwords, removing stored payment methods, and freezing account funds.

Chick-fil-A, Inc. notified the NH Attorney General of a data security incident involving unauthorized access to Chick-fil-A One accounts. Attackers used stolen credentials from a third-party source to access customer data between Dec 18, 2022 and Feb 12, 2023. 82 NH residents were affected. Data included credentials, payment info, and account balances. Chick-fil-A engaged forensic investigators, reset passwords, and froze funds.

Chick-fil-A, Inc. disclosed a data breach affecting 61 Maine residents. The breach, which occurred between December 18, 2022, and February 12, 2023, was discovered on February 12, 2023. The incident was categorized as an external system breach or hacking, resulting in the compromise of customers' names and financial account information, including credit/debit card numbers along with their security codes or PINs. Affected individuals were notified electronically on March 2, 2023.