2022 Former employee data theft — 8.2M Cash App Investing
Data compromised
Names, brokerage account numbers, portfolio values, holdings, trading activity
Technical writeup
Former Block employee downloaded corporate reports containing Cash App Investing customer data after leaving in December 2021. Names, brokerage account numbers, portfolio values, holdings, trading activity. No SSNs, passwords, or bank account info. U.S. Cash App Investing users only.
Root cause
Insider threat; former employee downloaded data after termination.