Convenience store chain Wawa announced Thursday it has suffered a massive data breach that has affected “potentially all” of its store locations and compromised the debit and credit card information of thousands of customers.

In an open letter to customers, Wawa CEO Chris Gheysens disclosed the company’s information security team discovered malware on Wawa payment processing servers on Dec. 10 and that the malware was blocked and contained by Dec. 12. “This malware affected customer payment-card information used at potentially all Wawa locations beginning at different points in time after March 4, 2019 and until it was contained,” Gheysens said.

Jaclyn Jaeger is a freelance contributor to Compliance Week after working for the company for 15 years. She writes on a wide variety of topics, including ethics and compliance, risk management, legal,...