ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Here at Wawa, the sky's the limit.​ Voted as “America’s Favorite Convenience Store,” Wawa operates a chain of convenience retail stores located in Pennsylvania, New Jersey, Delaware, Maryland, Indiana, Ohio, Kentucky, Virginia, North Carolina, Georgia, Alabama, Florida, and Washington D.C. We're fast-growing and expanding in 2025 and 2026. Today, Wawa is your all day, every day stop for fresh, built-to-order foods, beverages, coffee, fuel services, and surcharge-free ATMs. ​ We're making every day a little more fulfilling—one smile, hoagie, and experience at a time. We know that it's our Associates who put the "wow" in working at Wawa, so we're invested in giving them the encouragement they need to take flight. By providing flexibility and support, at work and beyond, we create an environment where everyone can thrive. We believe that with the right ingredients to grow and build a career—and a little wind beneath the wings—our Associates can reach new heights.​ Guided by our commitment to community, Wawa's 46K+ Associates take pride in putting people first, making days brighter, and bringing joy to our friends and neighbors. With opportunities such as volunteering, charitable giving, and events, we're able to extend care beyond the workplace, building stronger neighborhoods and long-lasting relationships.​ We have benefits that fuel well-being, including:*​ • Employee Stock Ownership Plan (ESOP) ​ • Tuition Reimbursement ​ • 401(k) Plan ​ • Medical/Dental/Prescription Coverage ​ • Flexible Spending Accounts (Health Care & Dependent Care) ​ • Employee Assistance & Wellness Programs ​ • Employee Credit Union ​ • Paid Time Off ​ • Employee Resource Groups • Parental Leave ​ • Wellness Programs ​ *eligibility requirements may apply ​ Got growth goals? Looking for a supportive flock? Soar with us!​

Wawa, Inc. A.I CyberSecurity Scoring

Wawa, Inc.

Company Details

Linkedin ID:

wawa-inc-

Employees number:

18,645

Number of followers:

106,567

NAICS:

43

Industry Type:

Retail

Homepage:

wawa.com

IP Addresses:

4

Company ID:

WAW_2825267

Scan Status:

In-progress

AI scoreWawa, Inc. Risk Score (AI oriented)

Between 700 and 749

https://images.rankiteo.com/companyimages/wawa-inc-.jpeg
Wawa, Inc. Retail
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreWawa, Inc. Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/wawa-inc-.jpeg
Wawa, Inc. Retail
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Wawa, Inc.

Moderate
Current Score
749
Ba (Moderate)
01000
2 incidents
0 avg impact

Incident timeline with MITRE ATT&CK tactics, techniques, and mitigations.

DECEMBER 2025
749
NOVEMBER 2025
749
OCTOBER 2025
748
SEPTEMBER 2025
748
AUGUST 2025
747
JULY 2025
747
JUNE 2025
746
MAY 2025
745
APRIL 2025
745
MARCH 2025
744
FEBRUARY 2025
743
JANUARY 2025
743
DECEMBER 2019
766
Breach
10 Dec 2019 • Wawa
Wawa Data Breach (2019) – Exposure of Customer Payment Card Data

In 2019, Wawa experienced a significant data breach lasting **eight months (March 4–December 12)**, where **malware on payment processing servers** exposed **credit/debit card details** (numbers, expiration dates, and cardholder names) of customers across **all 850 stores and fuel pumps**. The breach led to **fraudulent transactions**, prompting a **$9 million settlement** distributed via eGiftCards. Victims received **$5–$500** based on their losses: $5 for fraud with reversed charges, $15 for fraud without out-of-pocket costs, and $500 for verified financial harm. The breach was halted after discovery on **December 10, 2019**, but the prolonged exposure and **customer financial fraud** underscored severe operational and reputational damage. Wawa’s response included direct compensation but faced scrutiny over delayed detection and communication.

654
critical -112
WAW1302913112225
data breach malware attack payment card compromise
malware on payment processing servers
financial gain (likely theft of payment card data for fraud)
Financial Loss: $9 million (settlement payout) credit/debit card numbers card expiration dates cardholder names payment processing servers Downtime: 2 days (containment period) Brand Reputation Impact: moderate (public breach disclosure and settlement) Legal Liabilities: $9 million settlement Identity Theft Risk: high (payment card data exposed) Payment Information Risk: high (full card details compromised)
Incident Response Plan Activated: yes (discovered on Dec 10, 2019; contained by Dec 12, 2019) malware removal from payment servers $9M settlement with eGiftCard payouts to affected customers email notifications to affected customers (sent Nov 19, 2021+) public settlement details
payment card data (PII) Number Of Records Exposed: millions (exact number undisclosed) Sensitivity Of Data: high (full payment card details) Data Exfiltration: likely (malware designed to steal card data) cardholder names card numbers expiration dates
class-action lawsuit settlement ($9M)
resolved (settlement reached)
eGiftCard settlement emails (sent Nov 19, 2021+) with subject line 'Wawa Settlement eGift Card'
malware infection on payment processing servers settlement payouts likely security upgrades (undisclosed)
MARCH 2019
793
Cyber Attack
01 Mar 2019 • Wawa, Inc.
Wawa Data Breach

The California Office of the Attorney General reported that Wawa, Inc. experienced a data breach involving malware on payment processing servers, discovered on December 10, 2019, and contained by December 12, 2019. The breach potentially affected payment card information of individuals using cards at Wawa locations from March 4, 2019, to December 12, 2019, though the exact number of affected individuals is unknown.

762
high -31
WAW739072825
Data Breach
Malware
Data Compromised: Payment card information Systems Affected: Payment processing servers Payment Information Risk: High
Containment Measures: Contained by December 12, 2019
Type Of Data Compromised: Payment card information Number Of Records Exposed: Unknown Sensitivity Of Data: High

Frequently Asked Questions

According to Rankiteo, the current A.I.-based Cyber Score for Wawa, Inc. is 749, which corresponds to a Moderate rating.

According to Rankiteo, the A.I. Rankiteo Cyber Score for November 2025 was 749.

According to Rankiteo, the A.I. Rankiteo Cyber Score for October 2025 was 748.

According to Rankiteo, the A.I. Rankiteo Cyber Score for September 2025 was 748.

According to Rankiteo, the A.I. Rankiteo Cyber Score for August 2025 was 747.

According to Rankiteo, the A.I. Rankiteo Cyber Score for July 2025 was 747.

According to Rankiteo, the A.I. Rankiteo Cyber Score for June 2025 was 746.

According to Rankiteo, the A.I. Rankiteo Cyber Score for May 2025 was 745.

According to Rankiteo, the A.I. Rankiteo Cyber Score for April 2025 was 745.

According to Rankiteo, the A.I. Rankiteo Cyber Score for March 2025 was 744.

According to Rankiteo, the A.I. Rankiteo Cyber Score for February 2025 was 743.

According to Rankiteo, the A.I. Rankiteo Cyber Score for January 2025 was 743.

Over the past 12 months, the average per-incident point impact on Wawa, Inc.’s A.I Rankiteo Cyber Score has been 0 points.

You can access Wawa, Inc.’s cyber incident details on Rankiteo by visiting the following link: https://www.rankiteo.com/company/wawa-inc-.

You can find the summary of the A.I Rankiteo Risk Scoring methodology on Rankiteo by visiting the following link: Rankiteo Algorithm.

You can view Wawa, Inc.’s profile page on Rankiteo by visiting the following link: https://www.rankiteo.com/company/wawa-inc-.

With scores of 18.5/20 from OpenAI ChatGPT, 20/20 from Mistral AI, and 17/20 from Claude AI, the A.I. Rankiteo Risk Scoring methodology is validated as a market leader.