Cash App Investing Data Leak Lawsuit: What Users Need to Know in 2026

Searches for a “Cash App Investing data leak lawsuit” often mix two different questions: what information was exposed, and whether a user can still claim money. The short answer, as of October 11, 2026, is that the federal class settlement has been approved, its claim deadline has passed, and the settlement website says approved payments are scheduled for October 2026. A new claim cannot be filed through that settlement now. Whether you should wait for a payment, take extra account-security steps, or speak with a lawyer depends on what happened to your account and whether you submitted a timely claim.

The settlement resolves allegations; it is not a court finding that Block or Cash App Investing broke the law. The companies denied liability. Keep those distinctions in mind when evaluating social posts or messages that promise a guaranteed payout.

What was the Cash App Investing data incident?

Block’s April 4, 2022 filing with the U.S. Securities and Exchange Commission said a former employee downloaded reports on December 10, 2021, after the employee’s job had ended. The reports contained information about some U.S. Cash App Investing customers. Block said the exposed fields included customers’ full names and brokerage account numbers. For some customers, reports also contained portfolio value, holdings, or stock trading activity for one trading day.

The SEC filing said the reports did not include usernames or passwords, Social Security numbers, dates of birth, payment-card information, addresses, bank-account information, or Cash App access codes. Block said other Cash App products and features, apart from stock activity, and customers outside the United States were not affected by that specific incident. These statements describe the company’s preliminary account in its 2022 filing; they do not establish that every later Cash App security issue had the same scope.

The settlement case covered a wider set of allegations than the 2021 report download alone. The settlement website says plaintiffs alleged that an unauthorized person accessed certain Cash App accounts in 2023 using recycled phone numbers linked to those accounts. Plaintiffs also alleged deficient safeguards and inadequate handling of complaints about unauthorized or fraudulent transactions. Block and Cash App Investing denied wrongdoing. The court-approved settlement ended the case without a trial deciding those allegations.

Where does the lawsuit and settlement stand now?

The case is Salinas v. Block, Inc. and Cash App Investing, LLC, Case No. 22-cv-04823 in the U.S. District Court for the Northern District of California. The settlement administrator reports that the court granted final approval on March 27, 2025. The claim-form deadline was November 18, 2024; the administrator says late forms are no longer accepted. Its website, updated September 28, 2026, says distribution to approved claimants is scheduled for October 2026.

The settlement established a $15 million cash fund, from which approved claims, administration expenses, attorneys’ fees and other court-approved amounts are paid. Eligible claim categories included documented out-of-pocket losses up to $2,500, up to three hours of lost time at $25 per hour, and documented transaction losses connected to an unauthorized account event. Those are claim limits and categories, not a promise that every claimant receives the maximum or any fixed amount. The amount available to each approved claimant depends on the settlement terms, the claim review, and the net fund. The deadline has passed, so these categories are useful for understanding filed claims, not as a new application opportunity.

For current status, use the court-authorized settlement website and its notices. If you filed a claim, check the email, mailing address, or payment method you gave the administrator, and contact the administrator through the contact details on that site if information is outdated or a payment is missing. Do not pay a “release fee” or share a login code to receive settlement money.

Which next step fits your situation?

Should you keep Cash App, secure it, or leave?

Keep the account and add safeguards

This is the lowest-disruption option for someone who uses the app regularly and has no suspicious activity. Cash App says users can enable Security Lock, requiring a PIN, fingerprint, or face authentication before sending money or unlocking the app, and can turn on transaction or account alerts. Use a unique email password as well, secure the phone number tied to the account with the mobile carrier, and never share one-time login codes with someone who contacts you.

The benefit is convenience: payments and any investing relationship remain available. The trade-off is that you continue relying on the service and your own security habits. Account controls may help prevent unauthorized account use, but they do not erase historical brokerage details that may have been in a downloaded report.

Reduce use without immediately closing everything

If you are uneasy but still need the account, you can stop keeping a large balance there, unlink payment methods you no longer use, review connected devices and contact details, and watch linked bank and card statements. This creates a middle ground: fewer funds are exposed to potential account misuse while you decide whether a full exit is practical. It does not change what information may have been exposed in the past, and moving funds or investments can involve timing, fees, tax consequences, or service-specific procedures. Review current account disclosures before taking action.

Close or move the relationship

Choose this if you no longer need the service or would rather manage payments and investments elsewhere. Before closing, download records you need for taxes, confirm pending payments have settled, resolve disputes, and find the current process for transferring or liquidating any investments. Selling securities can have tax consequences; transferring holdings can have fees or eligibility limits. Do not assume that deleting the app closes the account or transfers securities. Confirm completion with the provider and retain confirmation records.

The practical trade-off is control versus effort. A move can simplify your future exposure to one provider, but it may add paperwork and account-transfer friction. It cannot undo past disclosure, and closing an account does not automatically erase records a company must retain under law or its published policies.

What should you do if you suspect fraud?

1. Secure access first. Use the official app or website to change credentials, enable Security Lock, review account details, and report changes you did not make. If the email account or phone number used for sign-in may be compromised, secure those with their providers too.
2. Report and preserve evidence. Contact Cash App through its official support channel and contact the bank or card issuer connected to any disputed transfer. Save statements, dates, screenshots, case numbers, and copies of messages. Do not use phone numbers or links in unsolicited texts.
3. Match the response to exposed data. The 2021 disclosure said Social Security numbers and bank details were not in those reports. A credit freeze is generally most relevant when identity or credit-file information could be misused; it can also add friction when you apply for credit. If you received a different breach notice or see identity-theft warning signs, use the Federal Trade Commission’s IdentityTheft.gov recovery guidance and consider a freeze with each nationwide credit bureau.
4. Escalate unresolved losses. If a financial institution does not resolve a documented unauthorized transfer, follow its dispute process and consider a complaint to the appropriate regulator or advice from a qualified attorney. Keep the settlement case separate from new events that occurred after its covered period.

How to spot misleading lawsuit messages

Be skeptical of advertisements or direct messages saying every Cash App user is owed money, that a new registration is open, or that a fee is required to release a settlement award. The official settlement FAQ states the deadline and that late claims are no longer accepted. It also says the settlement is not an admission of wrongdoing. Verify case updates by typing the administrator’s address yourself or by using the SEC filing for the 2022 incident; do not follow a payment link sent by an unknown account.

Cash App’s current safety page says the company offers Security Lock and account alerts, but those features are preventive controls, not proof that a past exposure did not occur. Likewise, inclusion in a class settlement does not mean a user experienced identity theft or is guaranteed compensation.

A concise decision check

• Filed a timely claim? Check the administrator’s official website for approval and payment status; do not submit personal information through unsolicited outreach.
• Missed the deadline? The administrator says late forms are closed. For an actual, substantial loss, get individualized legal advice rather than relying on a settlement ad.
• See suspicious activity? Secure the account, report promptly to Cash App and linked financial institutions, and preserve records.
• Choosing whether to stay? Compare convenience, account-security habits, transfer effort, and any fees or tax considerations. Pick the option that fits your actual use and risk tolerance.

Sources: Block’s April 4, 2022 SEC Form 8-K; Cash App Security Settlement FAQ and current status; Cash App security controls; FTC IdentityTheft.gov. This article summarizes public records and is not legal advice.