Chick-fil-A said Wednesday that a recent security incident may have exposed personal information linked to a limited number of customer loyalty accounts.
The Atlanta-based fast-food chain told FOX Business that it moved quickly to secure affected accounts and notify customers who may have been impacted.
“We recently identified a security incident that may have affected a limited number of Chick-fil-A One Loyalty accounts,” a company spokesperson said.
“Upon discovering the issue, we took steps to immediately address, secure and restore accounts, and we are communicating directly with all customers who may have been impacted.”
The spokesperson added that the company “sincerely apologize[s] for any inconvenience or concern” and remains “committed” to maintaining customers’ trust.
The company notified potentially affected customers Monday after discovering suspicious login activity involving certain Chick-fil-A One accounts, USA TODAY reported.
According to the notice, “unauthorized parties” targeted the company’s website and mobile app between June 17 and June 19.
The attackers used account credentials obtained from a “third-party source,” the outlet reported.
The incident affected customers in Iowa, Maryland, Massachusetts, New Mexico, New York, North Carolina, Oregon, Rhode Island, Vermont and Washington, DC, according to USA Today.
The data that may have been compromised included customers’ names, email addresses, Chick-fil-A One membership and mobile payment numbers, the last four digits of payment cards and the amount of Chick-fil-A credit stored in their accounts.
Chick-fil-A said it reset passwords for affected accounts, restored any impacted loyalty balances and added rewards to customers’ accounts, USA TODAY reported.