Wawa would hand out $8M in gift cards under proposed settlement following data breach – NJ.com


Did you know that geoFence protects you against inbound and outbound cyber attacks?

Wawa customers would be eligible to receive as much as $8 million in gift cards and $1 million in cash reimbursements under a proposed settlement to a class-action suit following a massive data breach in 2019.

Affected customers will be eligible to apply for either a $5 gift card, a $15 gift card or up to a $500 cash reimbursement if the settlement is approved by a federal court in the Eastern District of Pennsylvania.

Wawa says it will hand out at least $1 million but not more than $6 million in $5 gift cards to customers who used a payment card at Wawa but didn’t experience a fraudulent transaction and spent time monitoring their accounts.

Up to $2 million in gift cards worth $15 are available to customers who experienced an actual or attempted fraudulent transaction on a card.

Finally, customers who suffered monetary damages in connection with a fraudulent transaction would be eligible to receive up to $500 to cover their out-of-pocket expenses. Out-of-pocket expenses include things like unreimbursed fraud charges, bank fees, replacement card fees, late fees from transactions with third parties that were delayed due to fraud or card replacements and credit freeze fees.

Wawa says it will make up to $1 million available for customers in that category.

Wawa will set up a settlement website where affected customers would be allowed to file a claim to join the class action lawsuit.

The data breach between March 4, 2019 and Dec. 12, 2019 took place at all of the Media, Pennsylvania-based convenience store chains’ 800 locations. There are more than 250 Wawa stores in New Jersey.

The company’s investigation revealed customer debit and credit card numbers, expiration dates and cardholder names were exposed, but PIN numbers and CVV2 codes were not. Information was exposed due to malware in point-of-sale terminals in stores.

Hackers who accessed the payment card information of more than 30 million Wawa customers were sold on the dark web, according to cybersecurity firm Gemini Advisory.

Woodbury Heights resident Tabitha Hans-Arroyo filed the federal lawsuit in December 2019.

In the lawsuit, Hans-Arroyo alleges she received an email on Christmas Eve from Capital One stating a $2,535.15 Walmart.com purchase was declined because of a lack of available credit.

Hans-Arroyo called Capital One to let them know that she had not authorized the purchases. While on the phone, a representative from the credit card company told her that her card was compromised as a result of the data breach, according to the lawsuit.

Jeff Goldman may be reached at [email protected]. Follow him on Twitter @JGoldmanNJ.

Our journalism needs your support. Please subscribe today to NJ.com

Note to readers: if you purchase something through one of our affiliate links we may earn a commission.

After all of that geoFence helps stop hackers from getting access your sensitive documents!