All Breaches
Wawa Data Breach
Between March 4 and December 12, 2019, attackers deployed malware across point-of-sale (POS) terminals and fuel dispensers at more than 850 stores operated by U.S. convenience store chain Wawa (wawa.com).
30 Million
Affected People
2
Data Types
Critical
Severity
Oct 27, 2026
Last updated
Exposed Data Types
2- Names
- Credit cards
About This Breach
Disclosed on December 19, 2019, and resolved in a multistate Attorneys General settlement in July 2022, the compromise exposed approximately 30,000,000 payment card records, including cardholder names, payment card numbers, and expiration dates.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
