Where does the Chick-fil-A, Inc. case file come from?

Every entry is taken from the breach report Chick-fil-A, Inc. lodged with the Vermont Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Chick-fil-A, Inc. Data Breach

This file collects the dated facts on record for the Chick-fil-A, Inc. incident. The state report is dated July 20, 2026.

Timeline

July 20, 2026Report filed in VermontDate the notice was lodged with the Vermont Attorney General.

Case facts

Filing state: Vermont
Date reported: July 20, 2026
Receiving office: Vermont Attorney General

Case notes

Chick-fil-A, Inc., a prominent national quick-service restaurant, filed a report with the Vermont Attorney General on July 20, 2026, concerning a data security incident. The company's operations involve extensive consumer databases for services such as mobile ordering, loyalty programs, and digital payments.

While the specific categories of data involved in this breach are not detailed in the public filing, Chick-fil-A typically collects customer names, email addresses, mailing addresses, purchase histories, and encrypted payment card details. If you have received a formal data breach notification letter from the company, it indicates that your personal information was likely part of the information involved in this incident.

According to the official filing, the circumstances surrounding this event are currently under investigation. The company's disclosure to the Vermont Attorney General fulfills mandatory reporting requirements under state law.

For those who received a notification, it is prudent to remain vigilant. Consider monitoring your online accounts for any unusual activity and be cautious of unsolicited communications that might attempt to acquire further personal details. Regularly update passwords for important services and be wary of phishing attempts.

It is important to review the contents of any letter you received from Chick-fil-A for specific recommendations. Taking general security precautions can help mitigate potential risks associated with data exposure.

Questions about this case file

Where does the Chick-fil-A, Inc. case file come from?: Every entry is taken from the breach report Chick-fil-A, Inc. lodged with the Vermont Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Vermont data breaches

Named in the Chick-fil-A, Inc. breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Vermont case files