A credential stuffing attack on Chick-fil-A’s loyalty program exposed customer data such as names, emails, membership numbers, and partial payment details, highlighting a growing fraud risk in QSR loyalty programs. As these programs increasingly drive digital engagement and customer retention, QSRs are expanding fraud prevention beyond payment to include account login and behavior monitoring, employing stronger authentication methods like passkeys and device intelligence to detect suspicious activity early in the customer journey. Protecting loyalty programs has become critical to maintaining customer trust amid rising attacks targeting stored rewards and payment information.
https://www.qsrweb.com/blogs/loyalty-programs-have-become-new-front-line-of-qsr-fraud/