Cash App Suffers Breach, With Ex-Employee Accessing United States Customer Data

Block, the business behind the mobile payment service Cash App, has actually acknowledged a Cash App information breach in which a previous staff member accessed reports that consisted of United States client details. The business is informing about 8.2 million present and previous clients about the breach.

“Upon discovery, we took steps to remediate this issue and launched an investigation with the help of a leading forensics firm,” a representative stated Tuesday in an emailed declaration. “We know how these reports were accessed, and we have notified law enforcement. We are also contacting customers whose data was impacted. In addition, we continue to review and strengthen administrative and technical safeguards to protect information.”

On Monday, the business stated in a filing with United States Securities and Exchange Commission that the reports were accessed onDec 10. “While this employee had regular access to these reports as part of their past job responsibilities, in this instance these reports were accessed without permission after their employment ended,” according to the filing.

The reports consisted of client names and brokerage account numbers, and sometimes brokerage portfolio worths, brokerage portfolio holdings and stock trading activity for one trading day. They didn’t consist of usernames, passwords, Social Security numbers, payment card details, checking account information or addresses. Users outside the United States were untouched.

Block was formerly referred to as Square, and Cash App was formerly referred to as Square Cash.

News of the breach was reported previously by TechCrunch.

< div class ="col-7 c-reengageNewsletter c-reengageNewsletter_sticky shortcode hasNewsletter newsletter-subscribe-form desktop" data-track ="reengageNewsletter-fallback-e404" data-newsletter-and-interest-options ="{" interestdata ="" data-fixed-on-scroll-options ="{" scrollpercent ="" data-toggle-options ="{" selectortrigger ="" data-component="[" newsletterandinterest="">

Get the CNET Now newsletter