Dapeer Law, P.A. is reviewing a Chick-fil-a Lawsuit after a June incident that may have exposed information tied to Chick-fil-A One accounts. The review centers on 2,221 account holders in Texas and Massachusetts who received data breach notices after Chick-fil-A said it detected suspicious access.
The law firm said state filings show 2,182 people in Texas and 39 in Massachusetts were affected. Chick-fil-A said the information that may have been accessed could include names, email addresses, Chick-fil-A One membership numbers, mobile payment information, QR codes, the last four digits of payment card numbers and gift card balances.
Chick-fil-A One account review
Chick-fil-A said hackers used usernames and passwords that had been stolen or exposed elsewhere to try to access customer accounts between June 17 and June 19. On July 13, the company determined attackers may have accessed information in affected accounts, and it began notifying impacted customers on July 20.
Chick-fil-A said it secured impacted accounts, forced affected users to log out, removed stored payment methods and restored impacted Chick-fil-A One balances. It also urged customers to reset passwords, use a unique password not shared with other websites, and monitor Chick-fil-A One, bank and credit card activity for suspicious transactions.
Dapeer Law, P.A.
Dapeer Law, P.A. said it is reviewing potential legal claims on behalf of Chick-fil-A One account holders in Texas and Massachusetts. The firm’s review focuses on whether Chick-fil-A's account security measures met legal standards during the credential-stuffing attack, a method that relies on reused usernames and passwords rather than a fresh break-in to each account.
The quote Chick-fil-A gave to CBS News pointed to the same core issue: "We recently identified a security incident that may have affected a limited number of Chick-fil-A One Loyalty accounts." Chick-fil-A also said, "Upon discovering the issue, we took steps to immediately address, secure and restore accounts, and we are communicating directly with all customers who may have been impacted. We sincerely apologize for any inconvenience or concern this situation may have caused and remain committed to maintaining the trust our guests place in us every day."
Texas and Massachusetts filings
That account of a limited number of loyalty accounts sits beside the law firm’s state filings, which indicate 2,221 people were affected. The filings break that total into 2,182 in Texas and 39 in Massachusetts.
Dapeer Law’s review does not mean a lawsuit has been filed, and it does not establish liability. For affected customers, the practical step now is to treat the account as exposed, reset the password, avoid reusing it on other sites and check payment and loyalty activity closely, because the information that may have been accessed goes beyond a name and email address.
