In December 2019, Wawa convenience store chain disclosed a payment card breach, its security team discovered a PoS malware on its payment processing systems.
Wawa operates more than 860 convenience retail stores, this breach is potentially one of the biggest card incidents in 2019. The malware affected in-store payments and payments at fuel dispensers, anyway ATM machines were infected.
The malicious code infected the payment systems on December 10 and it was removed on December 12, the incident may have exposed debit and credit card data from thousands of customers.
This week, crooks started selling the Wawa customers’ payment card details of more than 30 million Americans and over one million foreigners on Joker’s Stash carding forum.
The popular investigator Brian Krebs, who first reported the news, pointed out that the card dump was advertised under the name of BIGBADABOOM-III. Krebs, citing sources that work closely with financial institutions, said that the card data was traced back to the Wawa chain.
“On the evening of Monday, Jan. 27, a popular fraud bazaar known as Joker’s Stash began selling card data from “a new huge nationwide breach” that purportedly includes more than 30 million card accounts issued by thousands of financial institutions across 40+ U.S. .”
Joker Stash announced that the dump would include US, European, and global card records, including the
According to Gemini, the median price of US-issued records from this p
“Since the breach may have affected over 850 stores and p
The experts believe that the incident is comparable to major card data breaches Home Depot (2014 – 56 million customers’ data) or Target (2013 – 40 million card data).
“Major breaches of this type often have low demand in the dark web. This may be due to the breached merchant’s public statement or to security researchers’ quick identification of the point of compromise.” concludes Gemini. “However, JokerStash uses the media coverage of major breaches such as these to bolster their credibility as the most notorious vendor of compromised payment cards.”
|[adrotate banner=”9″]||[adrotate banner=”12″]|