The fallout from the Wawa data breach continues to expand. Reports indicate customer data from the breach is now for sale on the dark web and the total number of compromised payment card accounts may reach 30 million. With more than half of Wawa’s stores located in Pennsylvania and New Jersey, the Wawa breach is one of the most important cybersecurity events in local history.

The iconic Delaware Valley convenience store announced the data security breach in December 2019. Wawa admits all 850 Wawa locations may have fell victim to malware running on in-store payment systems between April and December 2019. The malware targeted credit card information from fuel dispensers and in-store payment terminals. Information compromised in the breach includes debit and credit card numbers, expiration dates and cardholder names. Wawa maintains the breach did not reveal personal identification numbers (PINs) or CVV records (the three-digit security code on the back of a payment card).

This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.

To view this content, please continue to their sites.

Not a Lexis Advance® Subscriber?
Subscribe Now

Not a Bloomberg Law Subscriber?
Subscribe Now

Why am I seeing this?

LexisNexis® and Bloomberg Law are third party online distributors of the broad collection of current and archived versions of ALM's legal news publications. LexisNexis® and Bloomberg Law customers are able to access and use ALM's content, including content from the National Law Journal, The American Lawyer, Legaltech News, The New York Law Journal, and Corporate Counsel, as well as other sources of legal information.

For questions call 1-877-256-2472 or contact us at [email protected]