Fraud and Scam Alerts

Check here for information about common scams, data breaches and other security threats.

Data Breaches

SEE MORE

SEE LESS

Updates on known data breaches

Wawa

December 19, 2019

Wawa announced that its Wawa Information Security team discovered malware on Wawa payment processing servers on December 10, 2019 and contained it by December 12, 2019. This malware affected customer payment card information used at potentially all Wawa locations beginning at different points in time after March 4, 2019 and until it was contained. The information involved was limited to payment card data, including card number, expiration date, and cardholder name. Debit card PIN numbers, credit card CVV2 numbers (the three or four-digit security code printed on the card), other PIN numbers, and driver’s license information used to verify age-restricted purchases were not affected by this malware. The ATM cash machines in Wawa stores were not involved in this incident. At this time, Wawa is not aware of any unauthorized use of any payment card information as a result of this incident.

For more information, please visit www.wawa.com/alerts/data-security.

Capital One

July 29, 2019

Capital One Financial Corporation announced that on July 19, 2019, it had determined there was unauthorized access by an outside individual who obtained certain types of personal information relating to people who had applied for its credit card products and to Capital One credit card customers.

Capital One immediately fixed the configuration vulnerability that this individual exploited and promptly began working with federal law enforcement. The FBI has arrested the person responsible. Based on its analysis to date, Capital One says it is unlikely that the information was used for fraud or disseminated by this individual. However, the company is continuing its investigation.

For more information, please visit capitalone.com/facts2019/.