Block, the service formally known as Square and the parent company of Cash App, has reported a data breach to the Securities and Exchange Commission (SEC) after a former employee downloaded data from Cash App Investing.
As Protocol reports, the employee had access to this information while they worked there, but in this case, the data was accessed after they left the company.
The data gathered by the former employee is said to include the “full name and brokerage account number” of customers using Block’s investing service. Though limited, the data on some customers also included “brokerage portfolio value, brokerage portfolio holdings and/or stock trading activity for one trading day," Block explained in its SEC filing.
Recommended by Our Editors
More personal details like usernames, passwords, Social Security numbers, bank account information, and Cash App access codes were not included in the leaked data.
Block’s Cash App Investing subsidiary is reaching out to roughly 8.2 million customers, current and former, who may have been affected by the data leak.
Block didn't speculate about what the former employee planned to do with the data. It's working with "a leading forensics firm" on the issue, as well as law enforcement, according to the filing.