Hackers used an approach called credential stuffing, where an attacker plugs in stolen or leaked usernames and passwords into different websites. This intrusion into Chick-fil-A customer accounts occurred between June 17 and 19. In addition to the notifications, Chick-fil-A has removed saved payment info and logged users out of accounts. You tap, the phone auto-creates and saves the strong, unique password, and you’re done. Using one stops credential stuffing attacks cold—and by extension, keeps more of your data from appearing on the dark web.