East Coast convenience store chain Wawa agreed to pay $8 million in a settlement with a coalition of seven attorneys general announced Tuesday over its 2019 data breach that exposed the debit and credit card information of approximately 34 million payment cards.
Wawa neither admitted nor denied the investigation’s findings, which alleged the retailer “failed to employ reasonable data security measures” after a 2019 malware attack compromised its payment processing servers.
