30 mn debit, credit card details of WaWa customers up for sale online

Credit and debit card information from customers of the food and gasoline chain WaWa Inc is being sold online, according to the fraud intelligence company Gemini Advisory.

The breach “ranks among the largest payment card breaches of 2019, and of all time” because it potentially affected 850 stores and 30 million payment records, Gemini Advisory said in a report on Tuesday. The news follows WaWa’s announcement in December that payment processors in its stores had been compromised.

Gemini discovered that data from cards used at WaWa — many of which belong to US financial institutions — is available for sale on Joker’s Stash, a notorious online marketplace where credit and debit card information is bought and sold.