PHP Vulnerability Responses by Company

Wawa, Inc.

Companies / web services
Aliases / services
Wawa / ワワ / Wawa, Inc.
Official website
https://www.wawa.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

payment cards at stores and fuel dispensers

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

Payment-processing malware operated from varying dates after March 4 through December 12, 2019. Card numbers, expiration dates and names could be affected; PINs, CVV2 codes and ATMs were excluded.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review card statements and promptly report suspicious activity to your card issuer. Distinguish the historical assistance offer from current eligibility.

Official service URL

Source URLs

  1. Official operator evidencehttps://oag.ca.gov/ecrime/databreach/reports/sb24-185312Service and operation documentation
  2. 2019-12-19 official noticehttps://oag.ca.gov/system/files/Wawa%20Data%20Security%20Incident%20Notice%2012_19_2019.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Wawa, Inc. and the relevant scope.
  2. 2019-12-19 official noticeOfficial notice; link to this PHP incident unconfirmedConfirms incident scope and guidance for affected people.

Comments