WAWA, Pa. — Wawa has settled litigation stemming from the December 2019 data security breach that may have affected customers using credit and debit cards at the convenience-store chain’s approximately 860 locations in Pennsylvania, New Jersey, Delaware, Maryland, Virginia and Florida.
The settlement agreement, which is subject to court approval, resolves all customer claims related to that data security incident, which resulted from malware being discovered on Wawa payment processing servers. The malware affected customer payment card information used at most Wawa locations beginning at different points in time after March 4, 2019, and until it was contained on Dec. 12, 2019.
Customers who used a credit or debit card at Wawa stores or fuel pumps may participate in the settlement and obtain Wawa gift cards capped at $8 million in aggregate, and cash reimbursements of out-of-pocket costs capped at $1 million in aggregate.
Consumers can submit settlement claims by visiting www.WawaConsumerDataSettlement.com, which is run by KCC LLC.
The settlement also requires Wawa to implement and continue to maintain significant enhancements to its data security measures.
“We feel this settlement is an excellent result for the class, providing a range of benefits to consumers,” counsel for the consumer class said. “The settlement compensates three types of customers via different monetary awards—those who used their cards at Wawa and did not experience fraudulent charges on their cards and who spent time monitoring their payment card or other accounts, those who did experience fraudulent charges on their cards, and those who incurred out-of-pocket costs as a result of the data breach. The settlement also provides valuable remedial relief aimed at preventing similar breaches in the future.”
In a statement, Wawa said, “We are focused on a timely resolution for Wawa customers who may have been affected by this incident, and this settlement allows us to just do that. At Wawa, the people who come through our doors every day are not just customers, you are our friends and neighbors, and nothing is more important than honoring and protecting your trust. We can assure you that we have continued to and will work diligently to protect your information and enhance our cybersecurity resiliency.”