One of the largest data leaks ever traced back to Wawa's 2019 malware attack