A former employee gained access to Block's Cash App Investing customer data, the company said Tuesday.
The former employee downloaded reports from the Block investing product on Dec. 10, 2021, Block reported to the SEC.
“While this employee had regular access to these reports as part of their past job responsibilities, in this instance these reports were accessed without permission after their employment ended,” Block said in the filing.
Block said the former employee, who was not named, obtained reports that included the names and brokerage account numbers of Cash App Investing customers.
Information on the brokerage portfolio value, holdings and stock trading activity for some customers were also compromised, the company said. The former employee did not gain access to other critical data, such as usernames, passwords, Social Security numbers, birthdates or payment card information.
Block said it is reaching out to roughly 8.2 million current and former customers to let them know of the breach. The company has also informed regulators and law enforcement authorities.
Shares of Block fell more than 6% Tuesday reportedly on news of the breach.