Chick-fil-A, Inc.

Companies / web services

Aliases / services: チックフィレイ / Chick-fil-A / Chick-fil-A, Inc.
Official website: https://www.chick-fil-a.com/

Sources identifying the operating company

https://www.maine.gov/ag/attachments/985235c7-cb95-4be2-8792-a1252b4f8318/66699dcb-5f86-40bb-9d12-d64dea06faca/ec19585c-8c34-4293-b2df-199b6a6ab9a0/2023-03-02%20-%20CFA%20-%20Individual%20Notification%20Template.pdf

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Chick-fil-A One membership accounts

Response status: Not listed
Response information checked: 2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Automated logins using externally obtained credentials occurred December 18, 2022–February 12, 2023, exposing membership data, QR codes and balances. Only the last four card-number digits were viewable.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Reset to a unique password and check membership balances, statements and credit reports for unfamiliar activity.

Official service URL

https://www.chick-fil-a.com/

Source URLs

Operator and official informationhttps://www.maine.gov/ag/attachments/985235c7-cb95-4be2-8792-a1252b4f8318/66699dcb-5f86-40bb-9d12-d64dea06faca/ec19585c-8c34-4293-b2df-199b6a6ab9a0/2023-03-02%20-%20CFA%20-%20Individual%20Notification%20Template.pdfService and operation documentation

Related official sources

Operator and official informationOfficial information directoryIdentifies Chick-fil-A, Inc. and the relevant service scope.
2023-03-02 official security noticeOfficial notice; link to this PHP incident unconfirmedAutomated logins using externally obtained credentials occurred December 18, 2022–February 12, 2023, exposing membership data, QR codes and balances.