"Block Warns Eight Million Customers of Insider Breach"

A leading US payments company is contacting over eight million current and former customers of its Cash App Investing subsidiary that a malicious insider may have accessed their details.  San Francisco-headquartered Block revealed the news in an SEC filing on Monday.  The company claimed that a former employee had downloaded “certain reports” containing Cash App customer information on December 10 last year, after their employment had ended.  The information in the reports included full name and brokerage account number (this is the unique identification number associated with a customer’s stock activity on Cash App Investing), and for some customers also included brokerage portfolio value, brokerage portfolio holdings, and/or stock trading activity for one trading day.  The company noted that the reports did not include usernames or passwords, Social Security numbers, date of birth, payment card information, addresses, bank account information, or any other personally identifiable information.  They also did not include any security code, access code, or password used to access Cash App accounts.  The company stated that no customers outside the US were affected, and no other Cash App products and features were impacted.  Cash App Investing is now contacting 8.2 million customers to update them on the incident and has notified the relevant regulatory and law enforcement agencies.

Infosecurity reports: "Block Warns Eight Million Customers of Insider Breach"