Summary
Chick-fil-A has confirmed a data breach affecting thousands of customer accounts due to a credential stuffing attack between June 17-19, 2026. Exposed information includes names, emails, membership numbers, and partial payment details, prompting the company to log out users, remove payment methods, and restore account balances.