Block, the company behind the mobile payment service Cash App, has acknowledged a Cash App data breach in which a former employee accessed reports that included US customer information.
The company is notifying about 8.2 million current and former customers about the breach.
Cash App is an app that allows users to easily send money, spend money, save money, and buy cryptocurrency.
The security breach took place last year on December 10, the downloaded reports includes customers full names as well as their brokerage account number and for some customers also included brokerage portfolio value, brokerage portfolio holdings and/or stock trading activity for one trading day.
Block pointed out that the reports don’t contain PII such as usernames or passwords, Social Security numbers, dates of birth, payment card information, addresses, and bank account details.
The company notified notified law enforcement and announced it is continuing to review and strengthen administrative and technical safeguards to protect the information of its customers.
Block added that at this time it is difficult to predict future costs associated with this security breach.