WAWA, INC.

Wawa, Inc. disclosed a data security incident involving malware on payment processing servers at potentially all Wawa locations. The malware operated between March 4, 2019, and December 12, 2019, affecting payment card information (credit/debit numbers, expiration dates, cardholder names). Wawa engaged forensic investigators, notified law enforcement and payment card companies, contained the malware, and offered one year of free credit monitoring and identity theft protection to affected customers.