Wawa Settles 2019 Data Breach Litigation

Agreement caps payout at $8 million in gift cards, $1 million in cash
Photograph courtesy of Wawa

WAWA, Pa. Wawa has settled litigation stemming from the December 2019 data security breach that may have affected customers using credit and debit cards at the convenience-store chain’s approximately 860 locations in Pennsylvania, New Jersey, Delaware, Maryland, Virginia and Florida.

  • Wawa, based in Wawa, Pa., is No. 10 on CSP’s 2021 Top 202 ranking of c-stores by store count.

The settlement agreement, which is subject to court approval, resolves all customer claims related to that data security incident, which resulted from malware being discovered on Wawa payment processing servers. The malware affected customer payment card information used at most Wawa locations beginning at different points in time after March 4, 2019, and until it was contained on Dec. 12, 2019.

Customers who used a credit or debit card at Wawa stores or fuel pumps may participate in the settlement and obtain Wawa gift cards capped at $8 million in aggregate, and cash reimbursements of out-of-pocket costs capped at $1 million in aggregate.

Consumers can submit settlement claims by visiting, which is run by KCC LLC.

The settlement also requires Wawa to implement and continue to maintain significant enhancements to its data security measures.

“We feel this settlement is an excellent result for the class, providing a range of benefits to consumers,” counsel for the consumer class said. “The settlement compensates three types of customers via different monetary awards—those who used their cards at Wawa and did not experience fraudulent charges on their cards and who spent time monitoring their payment card or other accounts, those who did experience fraudulent charges on their cards, and those who incurred out-of-pocket costs as a result of the data breach. The settlement also provides valuable remedial relief aimed at preventing similar breaches in the future.”

In a statement, Wawa said, “We are focused on a timely resolution for Wawa customers who may have been affected by this incident, and this settlement allows us to just do that. At Wawa, the people who come through our doors every day are not just customers, you are our friends and neighbors, and nothing is more important than honoring and protecting your trust. We can assure you that we have continued to and will work diligently to protect your information and enhance our cybersecurity resiliency.”

Members help make our journalism possible. Become a CSP member today and unlock exclusive benefits, including unlimited access to all of our content. Sign up here.


Exclusive Content


Grant Program Means New Competition in EV-Charging Space

Federal government opens $700 million in funding to public facilities


Colorado Springs Next in Line for Kum & Go’s New Food Program

Fourth market for c-store chain’s better-for-you menu


Wawa Commits $28.5 Million for 2019 Data Breach

Settlement provides compensation for individuals, attorneys’ fees and service representatives


More from our partners