Block Notifies 8.2M Customers After Breach of Cash App Investing

Block (SQ), formerly known arsenic Square, said Monday that a erstwhile worker improperly downloaded Cash App Investing reports containing U.S. lawsuit data. The payments institution is notifying immoderate 8.2 cardinal existent and erstwhile customers astir the breach, according to a regulatory filing.

• The worker had regular entree to the reports arsenic portion of their job, but the Dec. 10 entree occurred aft their employment had ended.

• Block said the reports included the customers’ afloat sanction and unsocial brokerage account. Some customers had much information successful the report, including portfolio value, holdings and 1 day’s trading activity.

• The reports did not see usernames, passwords, Social Security numbers, commencement dates, outgo paper oregon slope relationship information, addresses oregon different personally identifiable information.

• Block said the reports besides didn’t see information codes, entree codes oregon passwords for Cash App Investing accounts.

• The institution notified the applicable regulatory authorities and instrumentality enforcement astir the breach.

• Block hasn’t completed its probe into the incident, but doesn’t expect it to interaction its operations oregon fiscal results.

• “The institution takes the information of accusation belonging to its customers precise earnestly and continues to reappraisal and fortify administrative and method safeguards to support the accusation of its customers,” Block said successful the filing.

• Block shares fell 3.6% successful aboriginal trading to $129.86.