Two people are suing digital payments (opens in new tab) powerhouse Block and its subsidiary Cash App Investing for allegedly failing to properly protect sensitive personal data in a December 2021 data breach.
As per the lawsuit filed in a federal district in Oakland, California, the two individuals saw “unauthorized charges (opens in new tab)” to their Cash App accounts, and spent many hours trying to fix the problem.
These unauthorized charges came as a result of a data breach (opens in new tab) in December 2021, when a former employee logged back into Cash App’s systems and downloaded internal reports which held personal information. The data the culprit took includes customers’ full names, brokerage account numbers, brokerage portfolio values, brokerage portfolio holdings, and in some cases, stock trading activity for one trading day.
Millions affected
Now, they’re seeking damages, as well as other punishment for the service providers, arguing the company “failed to exercise reasonable care in securing and safeguarding consumer information”. What’s more, they’re claiming the company didn’t notify customers on time, shared too little information about what had happened, and did not offer credit and identity monitoring services.
Block publicly disclosed the incident almost five months after it had happened – in early April 2022. Back then, it said that 8.2 million current and former customers were affected and that it had reached out to notify them of the incident.
The lawsuit doesn’t detail exactly how the unwanted charges came to be, or how they link to the December data breach. According to The Register, when Block first announced the data breach, it said the former employee did not steal usernames or passwords, or other sensitive personal information.
We have reached out to Block for a comment and will update the article if we hear back from the company.
Via: The Register (opens in new tab)
