How Did the Cash App Data Breach Happen? | UpGuard

The report details a December 10, 2022 insider data breach at Cash App where a former employee exfiltrated financial reports affecting ~8.2 million customers (names, brokerage account numbers, portfolio values/holdings and trading activity); Block delayed notifying affected users by four months, prompting a class-action suit. The piece critiques Cash App’s account-security posture and incident response, cites widespread account compromise complaints, and recommends controls such as immediate deprovisioning of terminated employees, stronger MFA, and data-leak detection.