Cash App Class Action Lawsuit Claims Company, Block Failed to Prevent Data Breach Affecting 8.2M Customers [UPDATE]
by Erin Shaak
Last Updated on August 6, 2024
Salinas et al. v. Block, Inc. et al.
Filed: August 23, 2022 ◆§ 4:22-cv-04823
Block, Inc. (formerly Square) and Cash App Investing face a lawsuit over a December 2021 data breach affecting the private information of 8.2 million people.
August 5, 2024 – Cash App Data Breach Settlement Website Is Live
The official website for the $15 million Cash App data breach settlement is live and can be found at CashAppSecuritySettlement.com.
Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.
Class members must submit a Cash App claim form online or by mail by November 18, 2024 to receive class action settlement benefits, including reimbursement for out-of-pocket losses, lost time or “transaction losses” resulting from the Cash App data breach.
To file a claim online, head to this page. Alternatively, you can download the PDF claim form or reach out to the Cash App settlement administrator to request a hard copy to return by mail.
To submit a claim, you will need the unique notice ID and confirmation code printed on the personalized settlement notice you may have received via mail or email. If you did not get a notice, you can still file a claim.
The court will decide whether to grant final approval to the Cash App security settlement at a hearing on December 16, 2024. Payments are typically distributed to eligible class members after a deal receives final approval and any objections or appeals are resolved.
Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.
March 5, 2024 – Block, Cash App Investing Data Breach Lawsuit Reaches $15M Settlement
The proposed data breach class action detailed on this page has been settled for $15 million.
Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.
The proposed Cash App data breach settlement, if preliminarily approved by the court, will cover current or former customers of Block and/or Cash App Investing, or any of its affiliates, parents or subsidiaries, whose personal information, Cash App account or Cash App Investing account was accessed or obtained without authorization, or who otherwise had unauthorized or fraudulent withdrawals or transfers of funds to or from, or a deficiency in the resolution of an error in, a Cash App account or any linked financial account since August 23, 2018.
The plaintiffs filed a motion detailing the terms of the agreement with Block and Cash App Investing on March 3, 2024. If the deal is ultimately approved by United States District Judge Araceli Martinez-Olguin, the companies will pay $15,000,000 to be divided among class members who submit timely, valid claims.
Per the agreement, eligible class members may file a Cash App lawsuit claim for up to $2,500 in out-of-pocket losses—that is, incurred costs that are supported by documentation and “fairly traceable” to the Cash App data security incident, unauthorized account activity or a deficiency in error resolution in connection with a Cash App account that occurred since August 23, 2018 and that have not already been reimbursed.
In addition, class members may also submit a claim for up to three hours of lost time spent dealing with issues related to these events, at a rate of $25 per hour, the settlement agreement shares.
Finally, the document relays that class members can file a claim for reimbursement of documented “transaction losses,” or costs that were incurred as a result of unauthorized account activity, since August 23, 2018.
According to the plaintiffs’ motion, all payments will be adjusted on a pro rata basis depending on the total number of valid claims, which is estimated to be up to 50,000.
As part of the deal, Block and Cash App Investing have also agreed to implement enhanced data security measures, the agreement says.
Court records indicate that a preliminary approval hearing is scheduled for April 25, 2024. ClassAction.org will update this page if and when the deal receives preliminary approval from the court, and when an official settlement website is launched.
Don’t miss out on settlement news like this. Sign up for ClassAction.org’s free weekly newsletter here.
Block, Inc. (formerly Square) and Cash App Investing, LLC face a proposed class action lawsuit over a December 2021 data breach during which the private information of 8.2 million current and former customers was reportedly compromised.
The 53-page lawsuit says the breach occurred when a former employee, who had access to customer data during his tenure, downloaded without authorization certain reports that included the personally identifiable information of those who used the brokerage platform.
According to the suit, the compromised information included current and former customers’ full names, brokerage account numbers (which are personal identification numbers associated with a user’s stock activity on the Cash App Investing platform), brokerage portfolio value and holdings, and trading activity.
The case claims Block (formerly Square, Inc.) and Cash App Investing were aware of the risk of the unauthorized disclosure of customer information yet failed to take reasonable steps to safeguard the data. The lawsuit says that although the defendants have not disclosed how the former employee gained access to customer information, the breach proves that the sensitive data was maintained “in a condition vulnerable to misuse.”
“While the exact reason(s) for the Data Breach remain unclear, there is no doubt that Defendants failed to adequately protect Plaintiffs’ and Class members’ Private Information and such negligent failures resulted in the injuries alleged herein,” the complaint states, stressing that data breach victims now face a heightened risk of identity theft and fraud.
The lawsuit relays that although Block discovered in mid-December 2021 that the former employee had gained access to customers’ personally identifiable information, the company waited another four months before announcing the breach in a regulatory filing with the Securities and Exchange Commission (SEC). Per the case, Block disclosed that Cash App Investing would be contacting roughly 8.2 million consumers whose information was affected.
According to the lawsuit, Block offered no explanation for the delay in notifying victims, which has caused them to experience harm “they otherwise could have avoided had a timely disclosure been made.”
Moreover, the defendants’ notice to data breach victims was “not just untimely but woefully deficient,” the lawsuit says, as the document lacked key details such as how the former employee was able to access customer information, whether the data was encrypted or otherwise protected, or how Block learned about the breach. According to the case, the defendants have failed to offer any credit or identity theft monitoring services to those whose information was compromised.
The lawsuit looks to represent anyone whose private information was compromised because of the Cash App Investing data breach.
Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s newsletter here.
Video Game Addiction Lawsuits
If your child suffers from video game addiction — including Fortnite addiction or Roblox addiction — you may be able to take legal action. Gamers 18 to 22 may also qualify.
Learn more:Video Game Addiction Lawsuit
Depo-Provera Lawsuits
Anyone who received Depo-Provera or Depo-Provera SubQ injections and has been diagnosed with meningioma, a type of brain tumor, may be able to take legal action.
Read more: Depo-Provera Lawsuit
How Do I Join a Class Action Lawsuit?
Did you know there's usually nothing you need to do to join, sign up for, or add your name to new class action lawsuits when they're initially filed?
Read more here: How Do I Join a Class Action Lawsuit?
Stay Current
Sign Up For
Our Newsletter
New cases and investigations, settlement deadlines, and news straight to your inbox.
Before commenting, please review our comment policy.