Block’s Cash App loses customer data to former staff

Abeerah Hashim  - Security Expert
Last updated: November 12, 2023
Cash app data breach
  • Block Inc. loses customer data on Cash App, its payment application.
  • A former employee of the company stole the data by downloading reports without permission.
  • The company is currently taking some controlling measures to handle the incident.

Block Inc. reported a breach of customer data on Cash App, its payments service application. The incident took place on December 10, 2021. But, Block reported the data theft to the U.S. Securities and Exchange Commission (SEC) on April 4. The company revealed that its former employee disobeyed its rules and stole customers’ data. It’s a case of cybersecurity insider threat. Yet again.

Details of the breach

Block’s report showed the different data types that its staff could access and those they couldn’t. The file contained some information about their U.S. customers, such as full names, portfolio holdings, and brokerage account numbers. Other information includes portfolio value and the user’s trading activities on stock for single-day trading.

However, the thief didn’t touch files containing the customer’s login credentials, date of birth, addresses, and social security numbers. Also, customers’ bank account information, transaction payment information, or other customers’ details are safe.

Additionally, Block explained the data breach doesn’t involve access to data used for accounts on Cash App. Hence, there’s no compromise to information on passwords, security, and access codes. Moreover, the reports don’t affect the company’s customers, who are non-U.S. residents.

In its statement, Block mentioned that part of the worker’s job enables easy access to these customers’ reports. But, in this case, the employee took the report without the company’s permission. Moreover, the action occurred after the end of their employment relationship with the firm.

Block’s controlling measures

Block said that it is currently reaching out to its former and present customers, almost 8.2 million. The company is giving out information on the theft to them. In addition, it provides informational resources to the customers to answer their questions. Also, the firm has involved law enforcement and regulatory authorities and is cooperating with them.

According to Danika Owsley, the spokesperson of Cash App, the company values its customers’ trust. So, it’s committing more to secure the information of its customers.

The Cash App spokesperson explained as soon as they discovered the breach, they took action to reduce the damage. It involved a reputable forensics company in leading the data breach investigation. Owsley revealed that they understood how the theft happened and informed the proper authorities. Also, the company is making comprehensive moves to protect all information.

No one is certain how this recent data breach could affect Block Inc. since it’s yet to conclude its investigations. But there will not be issues in its operations, businesses, and financial output.

Online buyers should be more Privacy Savvy

As millions of people increasingly use the internet today, there’s an equal rise in the number of cyber theft. More security issues and compromises are also on a high surge. Hence, there’s every need for everyone to be more private.

Both individuals and businesses should focus on security. They should protect everything about communications, investments, and even online activities. Remember that cybercriminals depend on every piece of information you share over time. So, try to be more private online and share lesser details about yourself.

Share this article

About the Author

Abeerah Hashim

Abeerah Hashim

Security Expert

Abeerah is a passionate technology blogger and cybersecurity enthusiast. She yearns to know everything about the latest technology developments. Specifically, she’s crazy about the three C’s; computing, cybersecurity, and communication. When she is not writing, she’s reading about the tech world.

More from Abeerah Hashim


No comments.