/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

Online fraud bazaar lists 30M+ US customers' card details for sale, which experts say come from breach of convenience store chain Wawa disclosed in December

In late December 2019, fuel and convenience store chain Wawa Inc. said a nine-month-long breach of its payment card processing systems …

Krebs on Security Brian Krebs

Context & Ripple Effects

In December, Wawa disclosed a nine-month breach of its payment card systems across 700 stores, and this new listing confirms what that disclosure implied: the stolen data is now monetized at scale. The pattern echoes the earlier Hy-Vee case, where a 5.3M+ card dump was tied to compromised gas pumps and store POS systems — fuel and convenience retail is a repeat target because card-present data flows through the same vulnerable payment infrastructure.

The scale matters: 30M+ cards on a single bazaar makes this one of the larger confirmed monetizations of a US merchant breach, and it converts Wawa's December disclosure from a compliance event into a measurable fraud supply shock.

First-order effects

  • Millions of Wawa customers face immediate card-fraud risk, and issuing banks must absorb the cost of reissuing compromised cards and covering fraudulent charges.

Second-order effects

  • Wawa joins Hy-Vee in the group of fuel-and-convenience merchants whose breaches feed bulk card dumps, raising acquirer scrutiny, potential liability exposure, and pressure to accelerate chip-based payment upgrades across their pump and counter terminals.

Third-order effects

  • If merchant POS compromises keep supplying bazaars at this volume, US card issuers and payment networks face sustained pressure to push EMV adoption and faster fraud detection at the point of sale, shifting breach costs toward merchants with outdated terminal security.

The trend: Stolen-card markets are industrializing around large US merchant POS breaches, turning fuel-and-convenience chains into recurring suppliers of card-present fraud inventory.

Discussion

  • @briankrebs @briankrebs on x
    Exclusive: The 9-month breach last year at Wawa filling stations may have compromised >30 million payment cards, the first batch of which just went up for sale in the cybercrime underground. https://krebsonsecurity.com/ ... https://twitter.com/...
  • @privacydigest @privacydigest on x
    Wawa Breach May Have Compromised More Than 30 Million Payment Cards — Krebs on Security https://krebsonsecurity.com/ ... > Now, fraud experts say the first batch of card data stolen from Wawa customers is being sold at one of the underground's most popular crime shops