People whose accounts were accessed without their authorization or who had fraudulent withdrawals or transfers can file claims, provided they had or currently have an account
between August 23, 2018, and August 20, 2024.
The class-action pointed to a 2021 incident the company disclosed in 2022, in which a former employee downloaded reports of some U.S. users without permission. It also noted another breach, disclosed in 2023, where an unauthorized user accessed some Cash App accounts using phone numbers that were linked to them.
Plaintiffs also alleged that Cash App and Block, the app's parent company, failed to install controls to block unauthorized users and that the company then mishandled customer complaints about the security breaches and fraudulent transactions.