Block, the parent company of Cash App, faced a significant data breach in December 2021 when a former employee unlawfully downloaded personal information of approximately 8.2 million Cash App users. The breach was not disclosed until April 4, 2022, nearly four months later, raising concerns about transparency and data security practices. Shareholders filed a class-action lawsuit, alleging Block misled investors by failing to disclose inadequate security measures before the breach and during its $29 billion acquisition of Afterpay. While the lawsuit was dismissed due to lack of evidence of fraudulent intent, the incident exposed vulnerabilities in Block’s data protection framework. Additionally, Block settled separate regulatory cases in 2024, paying $80 million to 48 states and $40 million to New York for anti-money laundering deficiencies in Cash App. The breach involved customer data leakage, though no ransomware was reported. Cash App, with 57 million monthly users and $283 billion in inflows (2024), faced reputational and financial risks, though the direct operational impact appeared contained to data exposure and legal repercussions.