Summary (tl;dr)

Cash App is distributing payments from a $15 million class-action settlement to eligible users who were affected by data security incidents and fraudulent transactions between August 2018 and August 2024. Payments, which can be up to $2,500, are expected to reach approved claimants in October 2026.

Essential Background

The class-action lawsuit against Cash App and its parent company, Block Inc., stemmed from two primary data security incidents. The first occurred in December 2021 when a former employee allegedly downloaded sensitive reports of approximately 8.2 million U.S. Cash App Investing customers without authorization, a breach that was publicly disclosed in April 2022. A second incident in 2023 involved unauthorized access to some Cash App accounts via recycled phone numbers. The lawsuit accused Cash App and Block Inc. of negligence and failing to adequately protect user information and implement sufficient security controls.

The Full Story

Current and former Cash App users who experienced unauthorized account access, fraudulent withdrawals, or transfers between August 23, 2018, and August 20, 2024, were eligible to file claims in the $15 million class-action settlement. While Cash App and Block Inc. denied any wrongdoing, they agreed to the settlement to resolve the litigation. The deadline for submitting claims was November 18, 2024. Approved claimants can receive up to $2,500 to cover documented losses such as credit-related costs, bank fees, and travel expenses. Settlement payments are scheduled for distribution in October 2026.

Why It Matters

This settlement is significant as it provides financial recourse for millions of Cash App users whose personal and account information was compromised. It also highlights the critical importance of robust data security measures and timely disclosure of breaches by financial technology companies to protect consumer trust and financial well-being. The legal action and subsequent payout underscore the responsibility of companies to safeguard user data against both internal and external threats.

Geographic Location

• Oakland, Alameda County, California, United States (Headquarters of Block Inc., the parent company of Cash App, which was subject to the class-action lawsuit)
• Philadelphia, Philadelphia County, Pennsylvania, United States (Location of the settlement administrator responsible for processing claims)