Chick-fil-A announced Wednesday that a recent security incident may have exposed personal information associated with a limited number of its Chick-fil-A One loyalty accounts. The Atlanta-based company stated it has taken steps to secure affected accounts and is communicating directly with customers who might have been impacted.
A company spokesperson confirmed the incident, saying, “Upon discovering the issue, we took steps to immediately address, secure and restore accounts, and we are communicating directly with all customers who may have been impacted.” The spokesperson added that the company apologizes for any inconvenience and remains committed to customer trust.
The incident involved suspicious login activity on certain Chick-fil-A One accounts, discovered by the company on Monday. According to a notice, unauthorized parties targeted the company's website and mobile app between June 17 and June 19, utilizing account credentials obtained from a third-party source.
The breach affected customers in Iowa, Maryland, Massachusetts, New Mexico, New York, North Carolina, Oregon, Rhode Island, Vermont, and Washington, D.C. Data potentially compromised includes customers' names, email addresses, Chick-fil-A One membership and mobile payment numbers, the last four digits of payment cards, and the amount of Chick-fil-A credit stored in their accounts.
Chick-fil-A has reportedly reset passwords for affected accounts, restored any impacted loyalty balances, and added rewards to customers' accounts.