cash app investing data leak lawsuit: Cash App Investing users who previously filed claims in a $15 million class-action settlement over alleged data security failures could begin receiving payments in October 2026. The settlement involves Block Inc., the parent company of Cash App, and Cash App Investing LLC. According to the settlement administrator’s latest published update, the review of claim deficiencies and appeals has been completed, and payments are scheduled for distribution to approved claimants this month.
The lawsuit alleged that Block and Cash App Investing failed to adequately protect customer information, mishandled certain unauthorized transactions, and did not properly resolve some customer complaints. Although eligible claimants may qualify for reimbursement of documented losses, not everyone affected by the reported security incidents will automatically receive money. The deadline to submit a claim has passed, and the settlement administrator is no longer accepting new claims.
Cash App Data Leak Settlement: Latest Update for October 2026
The official settlement website for Salinas v. Block Inc. and Cash App Investing LLC states that the U.S. District Court for the Northern District of California granted final approval of the settlement on March 27, 2025. The settlement administrator subsequently completed its review of claim deficiencies and appeals.
In an update dated September 28, 2026, the administrator said payments would be issued to approved claimants in October 2026. As of October 12, the published schedule identifies October as the expected distribution month, but individual payment dates and amounts may vary.
The settlement provides a total fund of $15 million to resolve the claims covered by the agreement. That amount is not a guaranteed payment for every Cash App customer. The fund also covers court-approved attorneys’ fees, settlement administration expenses, and other authorized payments. The amount available to eligible claimants therefore depends on the settlement terms and the number of valid claims.
What Happened in the Cash App Investing Data Breach?
The case followed a data security incident that Block disclosed on April 4, 2022. According to the company’s disclosure to the U.S. Securities and Exchange Commission, a former employee downloaded certain reports from Cash App Investing on December 10, 2021, after the employee’s employment had ended. The reports contained U.S. customer information that was accessed without authorization.
Block said the affected reports contained information relating to approximately 8.2 million current and former Cash App Investing customers. The company stated that the information included customers’ full names and brokerage account numbers. For some customers, the reports also contained brokerage portfolio values, portfolio holdings, or stock trading activity for one trading day.
The company’s disclosure said the affected reports did not contain Social Security numbers, dates of birth, payment card information, home addresses, bank account information, usernames, passwords, or account access codes. The disclosed incident concerned information associated with Cash App Investing’s brokerage services rather than every Cash App product or feature.
Following the disclosure, the company said it launched an investigation with outside assistance, notified relevant regulatory authorities and law enforcement, and began contacting affected customers.
Why Was a Class-Action Lawsuit Filed?
The lawsuit, known as Salinas et al. v. Block Inc. et al., was filed in federal court in 2022. The consolidated case addressed allegations involving multiple security and account-related incidents, not just the December 2021 data download.
The plaintiffs alleged that Block and Cash App Investing failed to use reasonable security measures to protect customer information. They also alleged that the companies failed to implement adequate safeguards against unauthorized account access and did not properly handle certain reports of fraudulent transactions and related customer complaints.
The lawsuit also addressed a security incident disclosed in October 2023. According to the settlement materials, plaintiffs alleged that an unauthorized person accessed certain Cash App accounts using recycled phone numbers linked to those accounts.
The plaintiffs sought relief for alleged negligence, misrepresentations, breaches of obligations to customers, and problems involving unauthorized or fraudulent withdrawals and transfers. These allegations were resolved through the class-action settlement rather than a trial determining liability.
Block Inc. and Cash App Investing denied wrongdoing and liability associated with the lawsuit. The settlement resolved the covered claims without an admission that the defendants violated the law.
How Much Money Can Eligible Cash App Users Receive?
Eligible claimants who submitted timely, valid claims may qualify for different forms of reimbursement under the settlement. The amount depends on the type of loss claimed, the supporting documentation, and the applicable settlement rules.
1. Reimbursement for Out-of-Pocket Losses
Eligible settlement class members could claim up to $2,500 for qualifying out-of-pocket losses associated with a covered data security incident, unauthorized account event, or qualifying failure to resolve an account issue. Claims generally required third-party documentation demonstrating the losses and their connection to a covered event.
2. Compensation for Lost Time
The settlement also permitted eligible claimants to request reimbursement for up to three hours of qualifying time spent addressing covered incidents or related problems. The specified rate was $25 per hour, making the maximum payment under this category $75.
3. Documented Transaction Losses
Eligible claimants could also request reimbursement for qualifying transaction losses arising from covered unauthorized account events. The settlement required supporting evidence, such as documentation showing that the incident had been reported to the defendants, a police report, or other documentation demonstrating that the unauthorized event occurred.
These categories are subject to the settlement’s detailed eligibility and documentation requirements. The maximum amount available under one category should not be interpreted as a guaranteed award or a promise that every claimant will receive the maximum payment.
Who Is Eligible for a Cash App Settlement Payment?
Payment eligibility depends on whether a person falls within the settlement class and submitted a valid claim within the required period. The settlement addressed specified data security incidents, unauthorized account events, and certain account-related complaint and error-resolution issues involving the relevant period.
The settlement materials identify August 23, 2018, through August 20, 2024, as the period relevant to specified claims for covered out-of-pocket losses and unauthorized account events. Eligibility is subject to the specific terms of the settlement and the evidence required for each type of reimbursement.
Cash App users who submitted qualifying claims by the November 18, 2024, deadline may receive payment if their claims were approved. People who did not file before that deadline cannot submit a new claim through this settlement.
Simply having a Cash App account, receiving a data breach notification, or hearing about the settlement does not automatically establish eligibility for compensation. The claim must satisfy the applicable settlement requirements.
When Will Cash App Settlement Payments Arrive?
According to the settlement administrator’s September 28, 2026, update, payments to approved claimants are expected to be issued in October 2026. The administrator also stated that its review of deficient claims and appeals had been completed.
The published update does not establish one universal arrival date for every claimant. Payment timing may depend on the administrator’s distribution process and the method used to deliver the payment. Claimants should rely on official settlement communications for information about their individual awards.
People who have not received a payment should not assume that they are approved for compensation solely because they belonged to the affected customer group. The relevant distinction is whether the claim was timely submitted and approved under the settlement terms.
Can You Still File a Cash App Data Leak Settlement Claim?
No. The deadline to submit a claim was November 18, 2024, and the settlement administrator states that late claim forms are no longer being accepted.
Consumers who did not submit a claim by the deadline should not rely on websites or social media posts suggesting that they can still file an initial claim under this particular settlement. The current phase concerns the distribution of payments to approved claimants, not the opening of a new claims period.
For case updates, claim status information, and settlement-related questions, consumers should consult the official Cash App Security Settlement website. They should be cautious about unsolicited messages requesting a payment, bank login credentials, account passwords, or fees in exchange for a settlement award.
What Did the Court Decide?
On March 27, 2025, the U.S. District Court for the Northern District of California granted final approval of the class-action settlement in case No. 22-cv-04823-SK. The court found the settlement fair, adequate, and reasonable under the applicable legal standards.
The court’s order also addressed attorneys’ fees, settlement administration costs, and incentive payments to the named plaintiffs. Those expenses are paid from the settlement fund as authorized by the court and the settlement agreement.
Final approval allowed the settlement to proceed toward distribution without a trial deciding the underlying allegations. It did not constitute a finding that Block or Cash App Investing was legally responsible for the alleged data security failures.
Cash App Data Leak Lawsuit: Key Facts
- Settlement fund: $15 million.
- Companies involved: Block Inc. and Cash App Investing LLC.
- Case name: Salinas et al. v. Block Inc. et al.
- Case number: 22-cv-04823-SK.
- Reported data incident: December 10, 2021.
- Public disclosure: April 4, 2022.
- Customers identified in the company’s disclosure: Approximately 8.2 million current and former Cash App Investing customers.
- Final court approval: March 27, 2025.
- Claim deadline: November 18, 2024.
- Maximum documented out-of-pocket loss reimbursement: Up to $2,500 for eligible claims.
- Lost-time reimbursement: Up to $75 for qualifying claims.
- Latest published payment schedule: October 2026 for approved claims.
- New claims: The filing period is closed.
What Cash App Users Should Know Now
The latest update in the Cash App Investing data leak lawsuit concerns payments from an existing class-action settlement, not a newly announced $15 million award or a new opportunity to file a claim. The settlement administrator says that approved claimants are expected to receive payments in October 2026 after the completion of claim reviews and appeals.
Eligible users who filed claims before the deadline should monitor their official settlement communications for payment details. Those who missed the deadline cannot join this settlement by submitting a late claim. Consumers should also distinguish between the allegations resolved by this data security settlement and other legal or regulatory actions involving Cash App, because separate proceedings may have different requirements, deadlines, and compensation terms.