Block, the service formally known as Square and the parent company of Cash App, has reported a data breach to the Securities and Exchange Commission (SEC) after a former employee downloaded data from Cash App Investing.
As Protocol reports, the employee had access to this information while they worked there, but in this case, the data was accessed after they left the company.
The data gathered by the former employee is said to include the “full name and brokerage account number” of customers using Block’s investing service. Though limited, the data on some customers also included “brokerage portfolio value, brokerage portfolio holdings and/or stock trading activity for one trading day," Block explained in its SEC filing.
More personal details like usernames, passwords, Social Security numbers, bank account information, and Cash App access codes were not included in the leaked data.
Block’s Cash App Investing subsidiary is reaching out to roughly 8.2 million customers, current and former, who may have been affected by the data leak.
Block didn't speculate about what the former employee planned to do with the data. It's working with "a leading forensics firm" on the issue, as well as law enforcement, according to the filing.
Sign up for What's New Now to get our top stories delivered to your inbox every morning.
This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.
Your subscription has been confirmed. Keep an eye on your inbox!
Read more on pcmag.com