Possible Data Breach at Chick-Fil-A Under Investigation

By Justin Ove (Patch Staff)

Chick-Fil-A is investigating a possible data breach that is believed to have occurred between December 2013 and September 2014, Krebs on Security said Tuesday.

The potential breach is believed to be localized to Pennsylvania, Georgia, Texas, Virginia and Maryland.

According to Krebs, a financial institution reported that all 9,000 of their credit cards listed in the alert shared Chick-Fil-A as a point of purchase. No other retailer was linked to all of the potentially compromised cards, Krebs said.

Chick-Fil-A said in a statement that it is investigating the possible breach. “We want to assure our customers we are working hard to investigate these events and will share additional facts as we are able to do so,” according to the statement.

Customers would not be liable for any fraudulent purchases made by criminals. Additionally, Chick-Fil-A would provide free identity protection and credit monitoring to affected cardholders, the statement said.

Earlier this year, The Home Depot announced that over 50 million credit and debit cards had been compromised through hacked point-of-sale terminals in their stores.