On December 19, 2019, Wawa convenience stores announced that they found malware on their payment processing servers on December 10, 2019, and contained it by December 12, 2019. This breach may have exposed debit and credit card information used by customers in its stores and at its gas pumps at all Wawa locations at different points in time after March 4, 2019, through December 12, 2019.
What information may have been exposed?
At this time, Wawa suspects this malware affected payment card information, including credit and debit card numbers, expiration dates, and cardholder names on payment cards used at potentially all Wawa in-store payment terminals and fuel dispensers during the aforementioned dates.
Debit card PIN numbers, credit card CVV2 numbers (the three or four-digit security code printed on the card), other PIN numbers, and driver’s license information used to verify age-restricted purchases, or other personal information were not affected by this malware. ATMs were not affected as well during the malware event.
January 2020 Update
On January 28, 2020, Wawa announced that they have become aware of reports of criminal attempts to sell some customer payment card information potentially involved in the previous Data Security breached that was announced on December 19, 2019.
Wawa’s CEO Chris Gheysens has written an Open Letter about the incident that can be viewed here.
What precautions should customers take?
We encourage our customers to always be vigilant and review your account for any suspicious activity and notify us immediately if you identify any questionable transactions.
Wawa has arranged for Experian to provide potentially impacted customers with one year of identity theft protection and credit monitoring at no charge. To take advantage of this service, visit the Experian IdentityWorks website to enroll at www.experianidworks.com/credit or contact Experian’s customer care team at 1-844-386-9559. Provide this activation code: 4H2H3T9H6.
In order to protect our customers, we have issued new Visa® debit cards for our customers who may have used their cards at Wawa stores during the impacted time period. Those customers should have received letters informing them of all of the precautions that the bank is taking to protect them.
We highly encourage all Howard Bank customers to utilize the following tools and services that are available to you as customers to protect you against potential fraud:
- Sign up for Real-Time Account Alerts within Online Banking allowing you to set up customized alerts to receive via email, text, or through online banking when a transaction is processed on your debit card.
- Utilize Manage My Cards with Mobile Banking providing you the ability to turn your debit card “on and off” and establish transaction controls and limits.