Private information of frequent Wawa shoppers may be at risk.

Wawa says that some of the credit card numbers stolen by hackers in December were recently found being sold by criminals.

It says the data breach affected all locations after March 4, 2019, until it was contained in December. Credit card information and customer names were taken from sales both in the store and at gas pumps.

RELATED:
Wawa faces lawsuits over data breach at all of its stores 
Wawa confirms data breach at all 850 locations, potentially impacting thousands 

The company said in a statement, "We remain confident that the malware we discovered on Dec. 10 was contained by Dec. 12 and since that time has not posed a risk to our customers."

State Attorney General Gurbir Grewal assured residents in a tweet that the state will be looking into the matter closely.

Using cash is the easiest way to avoid risk. However, the company says they're offering up credit monitoring to those concerned.

Wawa says it'll work with customers whose credit card companies won't reimburse their fraudulent charges as a result of the hack.