Wawa
NJCCIC Data Breach Notification
Original Release Date: 12/30/2019
Summary
Point-of-sale (POS) malware was found on Wawa’s payment processing systems on December 10, 2019 and is believed to have first been installed on March 4, 2019. The malware collected payment data such as credit and debit card numbers, expiration dates, and cardholder names but did not collect debit card PIN numbers, credit card CVV2 numbers, or driver’s license information. ATM transactions were unaffected. Wawa released a data breach letter regarding the incident.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.