Sponsored Content


By Analytics Consulting LLC, Claims Administrator

Credit unions can now file claims for payment from a $28.5 million settlement in a long-running lawsuit against Wawa convenience stores over a 2019 data breach. Eligible credit unions may receive up to $5 per card replaced as a result of the breach, and up to $4,000 for losses related to fraud. The deadline to file a claim is August 12, 2024.

Wawa announced the data breach in December 2019, reporting that malware had been installed on Wawa's payment processing servers, affecting customer payment card information used at potentially all Wawa locations for more than nine months before it was contained. Three credit unions filed lawsuits on behalf of financial institutions issuing the approximately 30 million payment cards allegedly compromised in the breach. The settlement between Wawa and the credit unions was announced last year. As reported by CU Times, the federal judge presiding over the lawsuits preliminarily approved the deal, paving the way for credit unions to receive payment.

Under the settlement, any U.S. financial institution, including credit unions, that issued a Visa, MasterCard, or Discover branded payment card and received an alert from one of the card brands indicating that cards they issues may have been compromised in the Wawa breach is eligible to file for compensation.

"This settlement is unique from other data breach settlements because the per-card payment for cancellation and replacement provides greater compensation for credit unions that had to incur those costs to mitigate the risk of fraud," said Mindee Reuben, a lawyer representing the credit unions filing the lawsuit.

Financial institutions can make either or both Tier 1 and Tier 2 claims, or make a Tier 3 claim as an alternative, Reuben said. Any claimant that files a Tier 1 or Tier 2 claim that would receive a higher payment under Tier 3 will automatically receive the higher Tier 3 amount.

Credit unions that issued alerted-on cards should have received a claim form in the mail with a unique identifier and PIN. Lawyers for the plaintiffs said that any credit union that received alerts from the card brands in connection with the Wawa data breach but that did not receive a claim form in the mail can contact the Claims Administrator at (855) 391-9265 or [email protected] for assistance.

All information regarding the Wawa Financial Institution Settlement, including copies of the settlement agreement, class notice, and claim form, can be found on the settlement website at https://www.wawafinancialinstitutionsettlement.com/.

To qualify for a payment, credit unions must send in a complete and valid claim form via mail or electronically on the website no later than AUGUST 12, 2024. 



Wawa Financial Institution Data Security Settlement

c/o Analytics Consulting LLC, Claims Administrator

P.O. Box 2009

Chanhassen, MN 55317-2009


[email protected]