THREATOPS

THREAT OPS › Threat News › Chick-fil-A loyalty accounts hijacked using stolen passwords

Chick-fil-A loyalty accounts hijacked using stolen passwords

medmalwarebytes_blogPublished 2026-07-22

<p class="wp-block-paragraph">Fast-food chain Chick-fil-A is <a href="https://www.mass.gov/doc/2026-1188-chick-fil-a-inc/download" rel="noreferrer noopener nofollow" target="_blank">warning customers</a> after attackers hijacked loyalty accounts using stolen passwords in a credential stuffing attack.</p>

<p class="wp-block-paragraph">Chick-fil-A says it detected suspicious login activity agains

MITRE ATT&CK techniques

Password ManagersT1555.005
Credential StuffingT1110.004
Multi-Factor AuthenticationT1556.006
CredentialsT1589.001

Indicators of compromise

https://www.mass.gov/doc/2026-1188-chick-fil-a-inc/downloadurl
https://www.chick-fil-a.com/customer-support/chick-fil-a-one-membership-program/creating-and-managing-your-account/how-do-i-reset-my-passwordurl

Original source: https://www.malwarebytes.com/blog/data-breaches/2026/07/chick-fil-a-loyalty-accounts-hijacked-using-stolen-passwords