WAWA, INC.

Wawa, Inc. disclosed a security breach involving malware on payment processing systems at its stores. The malware operated between March 4, 2019, and December 12, 2019, affecting payment card data (credit/debit numbers, expiration dates, cardholder names) at potentially all locations. Wawa discovered the malware on December 10, 2019, contained it by December 12, 2019, and notified law enforcement and payment card companies. No other personal information was accessed. Wawa offered one year of credit monitoring through Experian.