Chick-fil-A agrees to settlement to resolve data breach class action

Chick-fil-A data breach settlement overview: 

• Who: Chick-fil-A reached an agreement with plaintiffs David Stephens, Kaitlyn Strawn and John F. Pinckney to settle their data breach class action lawsuit.
• Why: The restaurant chain was being accused of negligence after it was subject to a data breach that impacted more than 71,000 accounts.
• Where: The Chick-fil-A data breach class action was filed in federal court in Georgia.

Chick-fil-A has reached a settlement in principle on a class action related to a data breach that affected more than 71,000 user accounts and personal information.

Plaintiffs David Stephens, Kaitlyn Strawn and John F. Pinckney asked a Georgia federal court to pause the proceedings for 60 days as the parties draft a settlement agreement and file a notice of dismissal by Dec. 11.

Details of the settlement were not released. The parties say they are “executing a mutually acceptable settlement agreement” and the request for the 60-day delay is “in good faith and not for purposes of delay.”

Chick-fil-A was accused of negligence over the data breach, with the plaintiffs arguing the restaurant should have had stronger security measures in place.

More than 71K Chick-fil-A accounts accessed over 2 months in data breach, company said

The Chick-fil-A data breach affected more than 71,000 accounts as hackers gained access to personal information including names, email addresses, Chick-fil-A One membership numbers and mobile pay numbers, QR codes and masked credit or debit card numbers, among other things. The breach took place between Dec. 8, 2022, and Feb. 12, 2023.

Chick-fil-A said a data breach investigation determined that an automated attack had been launched against its website and mobile app and that the hackers gained access to Chick-fil-A One accounts using account credentials such as email addresses and passwords that had been obtained by a third-party source.

The company said at the time that only the final four numbers of customers’ credit cards were accessed by the hackers.

Were you a victim in the Chick-fil-A data breach? Let us know in the comments.

The plaintiff is represented by Michael R. Reese, George V. Granade and Charles D. Moore of Reese LLP along with Robert E. Jones of The Jones Law Firm PC.

The Chick-fil-A class action lawsuit is Stephens, et al. v. Chick-fil-A Inc., Case No. 1:23-cv-00964-LMM, in the U.S. District Court for the Northern District of Georgia Atlanta Division.

Read About More Class Action Lawsuits & Class Action Settlements:

• Class action lawsuit alleges Francesca’s failed to protect customer, employee info during data breach
• Judge preliminarily approves Wawa data breach settlement
• Coinbase lawsuit claims company failed to protect her from hack
• Blackbaud to pay $49.5M settlement over 2020 ransomware attack