Block has notified the SEC that a former employee unlawfully accessed reports containing customer information related to US Cash App users.
In December, the individual downloaded reports that included the full names and brokerage account numbers of Cash App Investing users. Additionally, for some customers, details such as brokerage portfolio value, holdings, and stock trading activity for a single trading day were also obtained.
Importantly, the reports did not contain usernames, passwords, Social Security numbers, dates of birth, payment card information, addresses, or bank account details. Block, previously known as Square, is reaching out to approximately 8.2 million current and former customers, as well as relevant regulatory authorities.