Chick-fil-A discloses data breach after credential stuffing attacks