Chick-fil-A Loyalty Accounts Are Being Hijacked—Here's What to Do
July 23, 2026

Chick-fil-A Loyalty Accounts Are Being Hijacked: Here's What to Do
Scammers are breaking into Chick-fil-A One loyalty accounts right now using passwords stolen from other data breaches. If you have a Chick-fil-A One account, you need to change your password today. Here's what's happening and what to do about it.
What happened
Attackers obtained passwords from breaches at other companies—places you may have accounts at that aren't Chick-fil-A. They're using those stolen passwords to log into Chick-fil-A One accounts. If your password is the same (or similar) across multiple sites, your Chick-fil-A account is at risk right now.
Once they get in, they can steal your loyalty rewards, use your saved payment methods, and gather personal information on file.
What to do right now
Change your Chick-fil-A One password immediately. When you create a new one, make it something you've never used anywhere else. A password that's unique to Chick-fil-A is much harder for attackers to use if they steal it from another company.
If you use the same password on other accounts (email, banking, shopping, social media), change those too. Start with the important ones: email, banking, anything tied to your money or identity. This is called password reuse, and it's one of the fastest ways scammers move from one account to another.
How to avoid this in the future
Use a different password for every important account you care about. Yes, that's a lot to remember. That's why password managers exist—they're apps or browser tools that remember all your passwords for you so you don't have to. You remember one strong master password, and the manager keeps the rest safe and unique. Most password managers cost nothing or very little.
You should also turn on two-factor authentication (an extra login step that requires your phone) on accounts that offer it, including Chick-fil-A One if available. That way, even if someone has your password, they can't get in without your phone.
You're in control here. A quick password change takes two minutes and protects you now and into the future.
Sources
Chick-fil-A loyalty accounts hijacked using stolen passwords Malwarebytes Labs
Millions of cars could be tracked and unlocked by a hidden security flaw Malwarebytes Labs
FTC Returns Money to Consumers Harmed by Trend Deploy's Deceptive Marketing FTC Consumer Protection
Enjoyed this? Get the next issue free.