Block Inc. Monday confirmed that a security breach launched by a former employee several months ago could potentially affect 8.2 million users of the Cash app, a mobile-payment service that facilitates fund transfers, and, more recently, stock and bitcoin purchases. . According to the company’s SEC filing, the former employee downloaded reports containing U.S. customer data on Dec. 10.
The filing further reveals that only customers who used the app’s stock-related features were affected by the breach. The questionnaire reports include the client’s full name and brokerage account number and in some cases brokerage portfolio values, brokerage portfolio holding and / or stock trading activity. They did not include usernames or passwords, social security numbers, dates of birth, payment-card information, addresses, bank-account information or any other personally identifiable information.
Related: How-To: Protect your business from data breaches
At one point, the former employee had “regular access to these reports as part of their past work responsibilities,” the filing says, but by the time they were downloaded, their employment had already ended. Block refuses to answer TechCrunchThe question is why a former employee was still able to access the reports and how long they continued to have access after their employment ended.
Cash App spokeswoman Danica Osley said, “At Cash App, we value the trust of our customers and are committed to the security of our customers’ information.” TechCrunch In a statement. “Following the discovery, we have taken steps to address this issue and have launched an investigation with the help of a leading forensic agency. We know how these reports were accessed, and we have notified law enforcement.” Keep up the good work. “
Block is investigating the incident.
Related: 8 Ways A Data Violation May Take Your Company Tomorrow
Block, formerly known as Square, is also behind numerous other initiatives, including music-streaming service Tidal and Bitcoin company Spiral.
Block, Inc. Was down more than 7% until 10:12 am ET.