Cash App Settlement: The $15 Million Data-Breach Payout

The Breaches

Cash App, the popular payment app owned by Block, faced class-action claims over two security incidents. In one, a former employee downloaded internal reports containing customer account information after leaving the company — a breach Block disclosed had affected millions of current and former users. In the other, unauthorized users were able to access accounts using customers’ linked phone numbers. Plaintiffs alleged Block was negligent in protecting user data and in handling account-security and error-resolution, exposing customers to fraud and unauthorized transactions.

For a money-transfer app, account-access failures are especially serious because they can lead directly to lost funds.

The Settlement

Block agreed to a $15 million settlement to resolve the claims, while denying wrongdoing. Eligible users — broadly, those who had a Cash App or Cash App Investing account affected by unauthorized access or transactions over a multi-year window — could file for up to $2,500 for documented out-of-pocket losses, along with compensation for time spent dealing with the problem. Because payouts required third-party documentation of losses, approved claims averaged far less than the cap, and the claims deadline has since passed.

As with many breach settlements, the realistic payout for most people was modest and tied to proof of actual harm.

What Users Should Know

Whether or not you were in this settlement, treat a payment app like a bank account: enable every security feature (PIN, biometrics, login alerts), watch your transaction history, and report unauthorized activity immediately, since prompt reporting affects your protections. Keep documentation of any fraud — screenshots, dates and amounts — which is exactly what a settlement or a bank dispute will require.