Fraud experts say the first batch of card data stolen from Wawa customers is being sold at one of the undergrounds most popular crime shops. The new batch of cards that went on sale Monday evening map squarely back to cardholder purchases at Wawa. The biggest concentrations of stolen cards for sale in the BIGBADABOOM-III batch map back to Wawa customer card use in Florida and Pennsylvania. Wawa says it discovered the intrusion on Dec. 10 and contained the breach by Dec. 12, but that the malware was thought to have been installed more than nine months earlier, around March 4.”]