Spread the love

Quick Answer
– What it is: A federal class action against Block Inc. arising from a December 2021 data breach that exposed the personal and financial data of approximately 8.2 million current and former Cash App users, consolidated in the Northern District of California.
– Who qualifies: Current or former Cash App users whose account information was accessed without authorization between approximately August 2018 and August 2024, including those who suffered unauthorized transactions or identity theft tied to the breach.
– What it's worth: The settlement fund totals $15 million. Individual payouts depend on claim volume and documented losses, with out-of-pocket loss reimbursements potentially reaching $2,500 per claimant and base awards estimated between $25 and $75 for non-documented claims.

Case Snapshot

Cash App Lawsuit 2026: Settlement, Claims & Payouts featured legal article image
DetailInformation
CourtU.S. District Court, Northern District of California
Case Number3:22-cv-02926-RS (and consolidated actions)
Presiding JudgeHon. Richard Seeborg
Filing DateMay 2022 (consolidated; original complaints filed March-May 2022)
Parent Company DefendantBlock Inc. (formerly Square Inc.)
StatusSettlement under post-preliminary-approval administration; 2026 claim period active
Settlement Fund$15 million
Claims AdministratorKroll Settlement Administration LLC
Parallel Regulatory ActionCFPB enforcement proceedings, active as of late 2024

Introduction

The cashapp lawsuit represents one of the more consequential consumer data breach class actions currently working through the federal courts. Block Inc., the San Francisco-based fintech company that owns Cash App, faces claims from millions of users whose financial data was exposed in a breach first reported internally in December 2021.

The scale matters. A former employee downloaded reports containing sensitive account data for approximately 8.2 million customers. Block disclosed the breach publicly in April 2022, triggering a wave of federal litigation that was consolidated before Judge Richard Seeborg in the Northern District of California.

What distinguishes this case from a typical data breach settlement is the parallel CFPB enforcement track. That regulatory proceeding runs independently of the class action and could affect both the remedies available to consumers and the company's long-term compliance obligations.

With the settlement fund established and the claims process active into 2026, users who have not yet filed face a shrinking window. The legal picture, however, is more layered than most settlement guides suggest.

What Is the CashApp Lawsuit?

The cashapp lawsuit is a consolidated federal class action alleging that Block Inc. failed to adequately protect user data, resulting in unauthorized exposure of personally identifiable financial information.

The lead case, Case No. 3:22-cv-02926-RS, is before Judge Richard Seeborg in the Northern District of California. Multiple separately filed complaints were consolidated into this proceeding beginning in mid-2022.

The core legal theory is negligence combined with violations of California consumer protection statutes and, for certain claimants, federal claims under the Electronic Fund Transfer Act. Plaintiffs allege Block knew or should have known that former employees retained data access privileges they should not have had.

Key facts in the complaint:

  • A former Cash App employee downloaded sensitive financial reports in December 2021
  • The reports contained full names, brokerage account numbers, portfolio values, and stock trading activity for approximately 8.2 million current and former users
  • Block notified customers in April 2022, roughly four months after the incident
  • A secondary incident involving unauthorized account access was reported by some users in 2023

*Attorney Insight: Attorneys handling these claims note that the four-month notification delay is a significant factor in damages arguments, as plaintiffs can point to harm that allegedly occurred during the period users were uninformed about the exposure.*

Litigation Watch: The original breach affected 8.2 million users, Block waited four months to notify them, and the consolidated class action landed before Judge Richard Seeborg in San Francisco.

Cash App Lawsuit 2026 Update

As of 2026, the litigation has moved past the preliminary settlement approval stage and into active claims administration.

Judge Seeborg granted preliminary approval of the $15 million settlement in late 2024. The final approval hearing followed, and the settlement moved into the distribution phase in 2025. Claim filing remains open through deadlines that the court-appointed administrator, Kroll Settlement Administration LLC, has published on the official settlement website.

The 2026 update that matters most for potential claimants involves two developments. First, the CFPB's parallel enforcement action against Block is advancing on its own schedule. Second, some plaintiffs who opted out of the class settlement have pursued individual claims, with those cases still active in federal court.

2026 Status MilestoneDetail
Preliminary ApprovalGranted late 2024
Final ApprovalObtained 2025
Claims AdministrationActive through 2026 deadline
CFPB ActionOngoing, separate track
Opt-Out LitigationIndividual cases pending

*Attorney Insight: Attorneys handling these claims note that users who opted out of the class settlement to pursue individual claims face a different litigation timeline and typically need counsel with data breach and consumer finance experience to proceed.*

What Is the Cash App Data Breach Lawsuit?

The Cash App data breach lawsuit refers specifically to the legal proceedings arising from the December 2021 insider breach, distinct from other fraud complaints filed against the platform.

A former employee, after leaving Block's employment, still had access to Cash App Investing reporting tools. That individual downloaded reports that contained full names, brokerage account numbers, brokerage portfolio values, brokerage portfolio holdings, and stock trading activity. Social Security numbers, bank account numbers, and passwords were not included in the exposed data, according to Block's own disclosure.

The distinction between what was and was not exposed matters for damages. Claimants without documented financial losses face lower payouts than those who can demonstrate identity theft or unauthorized account activity tied to the breach.

What the breach exposed:

  • Full names
  • Brokerage account numbers
  • Brokerage portfolio values and holdings
  • Stock trading activity

What Block says was NOT exposed:

  • Social Security numbers
  • Bank account numbers or routing numbers
  • Passwords or PINs
  • Payment card numbers

*Attorney Insight: Attorneys handling these claims observe that the limited scope of exposed data makes documented-loss claims more difficult to prove, but also that courts have recognized the standalone harm of having financial account information compromised even without direct monetary loss.*

Block Inc. Lawsuit: The Corporate Defendant

Block Inc. is the named corporate defendant in the class action. The company was known as Square Inc. until a 2021 rebrand.

Block is the parent company of Cash App, the Cash App Investing brokerage, Afterpay, and the Square merchant payment ecosystem. Its current CEO is Jack Dorsey, who co-founded Twitter. The company is publicly traded on the New York Stock Exchange under the ticker symbol SQ.

The significance of Block's corporate structure to this litigation is that Cash App Investing, which held the brokerage account data at the center of the breach, operates under a separate registered investment adviser license. That created specific regulatory exposure under both SEC rules and FINRA oversight, in addition to the standard consumer protection claims.

Corporate EntityRole in Litigation
Block Inc.Parent company, named defendant
Cash AppConsumer payment platform, breach source
Cash App InvestingBrokerage subsidiary, data origin
Kroll Settlement AdministrationCourt-appointed claims administrator

*Attorney Insight: Attorneys handling these claims note that the involvement of a registered brokerage subsidiary adds a securities regulatory dimension that is absent from most consumer data breach cases, and that this complexity can affect both liability arguments and damages calculations.*

Litigation Watch: Block Inc. operates Cash App Investing as a licensed brokerage, which means the breach triggered not just consumer protection exposure but also financial regulatory scrutiny from the SEC and FINRA.

Cash App Class Action Settlement

The class action settlement established a $15 million non-reversionary fund, meaning any unclaimed money does not revert to Block but is instead distributed to court-approved cy pres recipients or redistributed among valid claimants.

Preliminary approval was granted in the Northern District of California. The settlement class covers approximately 8.2 million individuals whose data was accessed in the December 2021 breach, plus a broader group who experienced unauthorized account access between August 2018 and August 2024.

Class counsel includes firms with established consumer data breach practices. Settlement terms provide for three categories of reimbursement.

Settlement compensation tiers:

Claim TypeMaximum Recovery
Documented out-of-pocket lossesUp to $2,500 per claimant
Lost time (up to 3 hours at $25/hr)Up to $75
Transaction losses from unauthorized accessUp to $2,500 separately
Base/statutory claim (no documented loss)Pro rata share of remaining fund

*Attorney Insight: Attorneys handling these claims advise that claimants with documented losses file complete supporting documentation, including bank statements, dispute records, and any correspondence with Cash App support, because pro rata payouts on undocumented claims will be substantially lower than the cap amounts.*

Who Qualifies for the Cash App Settlement?

Eligibility for the Cash App settlement covers anyone who falls within one of two defined class categories.

Class A includes individuals whose brokerage account data was contained in the reports downloaded by the former employee in December 2021. Block identified approximately 8.2 million such individuals and sent direct notification letters.

Class B is broader. It includes anyone who experienced unauthorized access to their Cash App account, or who suffered a fraudulent transaction on their account, between August 23, 2018, and August 20, 2024. Membership in Class B does not require having received a breach notification letter.

Eligibility checklist:

  • You had a Cash App or Cash App Investing account during the covered period
  • You received a breach notification letter from Block Inc. (strongest indicator), OR
  • You experienced an unauthorized transaction you reported to Cash App and did not receive a full refund, OR
  • You can document identity theft or fraud traced to Cash App account data
CategoryCovered PeriodEvidence Needed
Class A (data breach)Dec. 2021 (notification sent Apr. 2022)Notification letter or account confirmation
Class B (unauthorized access)Aug. 23, 2018 to Aug. 20, 2024Account records, dispute history, bank statements

*Attorney Insight: Attorneys handling these claims note that Class B eligibility is frequently overlooked by users who never received a breach letter but who experienced fraud, and that these claimants may have the strongest documented-loss claims in the entire settlement.*

Litigation Watch: Class B eligibility extends to anyone with an unauthorized transaction between 2018 and 2024, a far broader group than the 8.2 million who received breach notifications.

Cash App Settlement Amount Per Person

The per-person payout from the Cash App settlement depends on claim volume and the category of loss claimed.

The $15 million fund must cover all valid claims, attorney fees (typically 25 to 33 percent in consumer class actions), and administrative costs. After fees and costs, the net distributable amount available to claimants will be lower than the gross fund figure.

For claimants without documented losses, the payout will be a pro rata share of whatever remains after prioritized reimbursements. If claim volume is high, that base amount could be in the range of $25 to $75. For claimants with documented losses up to $2,500, the recovery is capped at their actual documented amount, subject to fund adequacy.

Estimated payout ranges:

Claim CategoryEstimated Recovery Range
No documented loss (base claim)$25 to $75 (pro rata, volume-dependent)
Lost time onlyUp to $75
Documented financial lossUp to $2,500 per claim category
Maximum per claimant (combined)Up to $5,000 (combined loss categories)

*Attorney Insight: Attorneys handling these claims emphasize that documented-loss claimants should not assume the cap equals their actual recovery, because fund adequacy constraints can reduce even documented awards in oversubscribed settlements.*

Cash App Fraud Lawsuit

The fraud lawsuit against Cash App is a distinct legal action from the data breach class action, though the two are frequently conflated.

Multiple plaintiffs filed complaints alleging that Cash App systematically failed to investigate or remediate unauthorized transactions, in violation of the Electronic Fund Transfer Act (EFTA) and its implementing rule, Regulation E. Under EFTA, financial institutions must investigate disputed electronic fund transfers and provisionally credit consumers within specific timeframes.

The fraud-related claims allege that Cash App denied legitimate disputes, failed to issue provisional credits, and closed customer accounts without notice when disputes were filed. Some complaints also name Block for allegedly routing users away from effective dispute resolution.

Fraud claim legal theories:

  • EFTA Section 908 violation (failure to investigate)
  • Regulation E timing violations (provisional credit not issued)
  • Negligence (failure to maintain adequate fraud detection)
  • California CLRA and UCL violations (unfair business practices)

*Attorney Insight: Attorneys handling these claims note that EFTA claims carry a one-year statute of limitations from the date of the violation, making early legal consultation critical for users whose unauthorized transactions occurred more than six months ago.*

Fraud Claim TypeApplicable LawStatute of Limitations
Unauthorized EFT disputeEFTA / Reg E1 year from violation
NegligenceState tort law2-3 years (state-specific)
Unfair business practiceCA UCL4 years

CFPB Cash App Enforcement Action

The Consumer Financial Protection Bureau's enforcement action against Block represents a separate and independent legal proceeding from the class action settlement.

In December 2024, the CFPB filed a lawsuit against Block Inc. in federal court, alleging that Cash App violated the Electronic Fund Transfer Act by failing to properly investigate fraud complaints, shutting down customer accounts, and directing users away from dispute resolution processes. The CFPB's complaint also alleged that Block's anti-money-laundering controls were inadequate, exposing users to greater fraud risk.

The CFPB action is notable because it is a government enforcement proceeding, not a private class action. Any penalties or restitution ordered by the court would be separate from the $15 million class settlement fund.

CFPB enforcement action key details:

  • Filing Date: December 2024
  • Allegations: EFTA violations, inadequate fraud investigation, unfair practices
  • Potential Penalties: Civil monetary penalties and mandatory remediation
  • Effect on Class Settlement: Independent proceeding; does not affect class claims

*Attorney Insight: Attorneys handling these claims note that CFPB enforcement actions can independently produce restitution for consumers, and that users who were harmed by Cash App's dispute resolution practices may have remedies outside the class settlement framework entirely.*

Litigation Watch: The CFPB's December 2024 federal lawsuit against Block adds a government enforcement layer that could produce restitution independent of the $15 million class settlement fund.

Cash App Data Breach 2021-2022 Timeline

Understanding the sequence of events is essential to evaluating both eligibility and liability arguments in the litigation.

The breach originated not from an external hacker but from a former employee who retained internal access after leaving the company. This insider-threat origin is legally significant because it shifts negligence arguments toward Block's access-management protocols.

Complete incident timeline:

DateEvent
August 2018Class B coverage period begins
December 2021Former employee downloads brokerage reports
April 4, 2022Block files SEC Form 8-K disclosing the breach
April 2022Notification letters sent to approximately 8.2M affected users
March to May 2022Individual lawsuits filed in federal courts
Mid-2022Cases consolidated before Judge Seeborg, N.D. Cal.
2023Additional unauthorized account access complaints surface
2024 (late)Preliminary settlement approval; CFPB files enforcement action
2025Final settlement approval; claims administration begins
2026Active claims period; filing deadline in effect

*Attorney Insight: Attorneys handling these claims point to the April 2022 SEC Form 8-K as the formal public disclosure date, which is the anchor date for several statutory deadlines in both the class action and individual claims.*

Cash App Lawsuit Filing Deadline 2026

The filing deadline for claims in the Cash App class action settlement is set by court order and administered by Kroll Settlement Administration LLC.

As of the time of this writing, the claims deadline falls within 2026, consistent with the post-final-approval administration timeline established by Judge Seeborg's court order. The specific date is published on the official settlement administration website maintained by Kroll.

Missing the filing deadline is outcome-determinative. Class members who do not submit a valid claim form by the deadline receive nothing, even if they were directly affected by the breach.

Deadline-related facts:

  • The court set the deadline by order following final approval
  • Kroll Settlement Administration is the authoritative source for the current date
  • Late claims are not accepted without court permission, which is rarely granted
  • Users who received a breach notification letter should treat that letter as confirmation of eligibility
Deadline ActionConsequence of Missing
Claim filing deadlineNo compensation from settlement fund
Opt-out deadline (passed)Cannot pursue individual claim separately
Objection deadline (passed)Cannot challenge settlement terms

*Attorney Insight: Attorneys handling these claims note that courts have denied late claim submissions in data breach settlements absent extraordinary circumstances, and that users who are uncertain whether they qualify should file a claim before researching further.*

Litigation Watch: The claims deadline is outcome-determinative; users who miss it have no path to recovery from the $15 million fund regardless of how directly they were affected.

How to File a Cash App Settlement Claim

Filing a claim in the Cash App class action settlement requires submission through the official claims process administered by Kroll Settlement Administration LLC.

Claimants must provide basic identifying information, confirm their status as a Cash App or Cash App Investing account holder during the covered period, and select the appropriate claim category. Claimants seeking documented-loss reimbursement must upload supporting documentation.

Step-by-step claim process:

  1. Locate your Claimant ID from the breach notification letter (if received)
  2. Access the official settlement claims portal administered by Kroll
  3. Enter account information and covered-period confirmation
  4. Select claim category: base claim, lost time, or documented loss
  5. Upload supporting documentation for loss claims (bank statements, dispute records, identity theft reports)
  6. Submit before the court-ordered deadline
  7. Retain your claim confirmation number

*Attorney Insight: Attorneys handling these claims advise that documentation quality is the single largest determinant of payout for claimants seeking more than the base amount, and that FTC identity theft reports, dispute denial letters from Cash App, and bank statements showing unauthorized debits are the strongest forms of evidence.*

Document TypeClaim Category It Supports
FTC Identity Theft ReportDocumented loss claim
Cash App dispute denial letterUnauthorized transaction claim
Bank statements (unauthorized debits)Out-of-pocket loss claim
Notification letter from BlockEligibility confirmation
Credit monitoring enrollment receiptLost time / preventive measures

Cash App Settlement Claim Form

The Cash App settlement claim form is the official document submitted to Kroll Settlement Administration to request compensation from the $15 million fund.

The form captures claimant identification, account history, and loss category. It is available in both online and paper formats through the claims administrator. Users who received a notification letter from Block also received a Claimant ID, which should be entered on the form to link their submission to the pre-identified breach class.

For claimants without a Claimant ID (typically Class B members with unauthorized transaction claims), the form includes an alternative verification pathway that requires account information and incident documentation.

Common claim form errors that reduce or void payment:

  • Submitting without a Claimant ID when one was assigned
  • Selecting the wrong claim category
  • Failing to attach documentation for documented-loss claims
  • Using an outdated form version (Kroll periodically updates)
  • Missing signature or certification field

*Attorney Insight: Attorneys handling these claims note that deficient submissions generate a cure notice from the administrator, but that claimants who fail to respond to cure notices within the specified window have their claims rejected without further recourse.*

Cash App Lawsuit Payout: How Much Will You Actually Get?

The realistic payout from the Cash App lawsuit is substantially lower for most claimants than the headline settlement amount suggests.

The $15 million gross fund must first cover attorney fees, which in consumer class actions typically run 25 to 33 percent of the total fund. At 30 percent, that leaves approximately $10.5 million for distribution. Administrative costs paid to Kroll reduce the net further.

From the net fund, documented-loss claims are paid first, up to their documented caps. The remainder is distributed pro rata among base claimants. In large consumer data breach settlements with millions of potential claimants, base pro rata shares frequently land below $50, and sometimes below $20.

Realistic payout modeling:

ScenarioExpected Recovery
Base claim, high claim volume$15 to $40
Base claim, moderate claim volume$40 to $75
Lost time only (3 hours)Up to $75
Documented loss, $500~$500 (subject to fund adequacy)
Documented loss, $2,500 capUp to $2,500 per category

*Attorney Insight: Attorneys handling these claims observe that the vast majority of class members will file base claims, which means documented-loss claimants with strong paperwork are effectively competing for a different pool of money and have a far better return on the effort of filing.*

Litigation Watch: After fees, costs, and priority payouts, the effective base claim amount for undocumented claimants could fall below $40, making documentation of any out-of-pocket loss critically important to maximizing recovery.

State-by-State Cash App Settlement Eligibility

The federal class action is governed by federal law and the Northern District of California's administration, but state law variations affect how individual claimants outside the settlement framework can pursue additional relief.

Several states have consumer protection statutes that provide recovery rights independent of or supplementary to the federal class settlement. Users in California, Illinois, New York, and Texas face different legal landscapes for individual claims.

State-level consumer protection laws relevant to Cash App claims:

StateApplicable StatuteKey Advantage
CaliforniaCCPA, CLRA, UCLPrivate right of action; statutory damages up to $750 per incident
IllinoisBIOMETRIC INFO PROT. ACT (if applicable), Consumer Fraud ActStrong fraud investigation requirements
New YorkNY SHIELD Act, GBL Section 349Broad breach notification requirements
TexasDTPATreble damages available for deceptive practices
FloridaFDUTPAActual damages plus attorney fees

California-based claimants who opted out of the class settlement may have independent CCPA claims worth pursuing. The CCPA provides a private right of action for breaches of non-encrypted personal information, with statutory damages between $100 and $750 per consumer per incident, without requiring proof of actual harm.

*Attorney Insight: Attorneys handling these claims note that California residents with CCPA claims who opted out of the class have the strongest individual case profiles, particularly if they can document economic harm in addition to the statutory damages floor.*

What Attorneys Handle the Cash App Lawsuit?

The type of attorney best positioned to handle Cash App claims depends on the nature of the claim being pursued.

For claimants filing within the class action settlement, no attorney is required. The claim form is self-service through Kroll. However, claimants with substantial documented losses, or those considering opting out of the settlement to pursue individual claims, benefit from legal representation.

Attorney type by claim category:

Claim TypeAttorney Specialty
Class settlement claim filingSelf-service; no attorney needed
Documented loss over $2,500Consumer protection attorney
Individual EFTA / Regulation E claimConsumer finance litigation attorney
CCPA individual claim (California)Privacy / data breach attorney
Individual opt-out federal claimClass action / complex litigation attorney
Identity theft-related lossConsumer protection or civil rights attorney

Attorneys who handle consumer data breach cases typically take these cases on contingency, meaning the client pays nothing unless the attorney recovers money. Fee arrangements in individual cases vary by firm and claim size.

The National Consumer Law Center and state bar referral programs maintain directories of attorneys who practice in consumer financial protection and data breach litigation. Cases with documented losses exceeding $5,000 are generally the threshold at which individual representation becomes economically practical.

*Attorney Insight: Attorneys handling these claims advise that users with losses below the individual case threshold still benefit from a free consultation to understand whether their specific facts, including state of residence and type of harm, support a recovery strategy outside the class settlement.*

Frequently Asked Questions

What is the Cash App lawsuit about in 2026?

The Cash App lawsuit refers to a consolidated federal class action against Block Inc. in the Northern District of California, Case No. 3:22-cv-02926-RS.

The case arises from a December 2021 data breach in which a former employee downloaded financial records for approximately 8.2 million users.

As of 2026, the settlement is in the active claims administration phase, with Kroll Settlement Administration processing submissions against a $15 million fund.

Who qualifies for the Cash App class action settlement?

Anyone who held a Cash App or Cash App Investing account and had data exposed in the December 2021 breach qualifies as a Class A member.

Class B eligibility covers anyone who experienced unauthorized account access or an unresolved fraudulent transaction between August 23, 2018, and August 20, 2024.

Receiving a breach notification letter from Block is strong evidence of eligibility, but it is not required for Class B claimants.

How much money can I get from the Cash App settlement?

Claimants with no documented losses receive a pro rata share of the remaining fund after fees and priority payments, estimated at $25 to $75.

Claimants with documented out-of-pocket losses can recover up to $2,500 per claim category, subject to fund adequacy.

The $15 million gross fund is reduced by attorney fees, typically 25 to 33 percent, and administrative costs before distribution begins.

What is the deadline to file a Cash App lawsuit claim in 2026?

The filing deadline is set by court order and administered by Kroll Settlement Administration LLC, with the current deadline falling within 2026.

The exact date is published on the official settlement administration portal maintained by Kroll.

Missing the deadline results in forfeiture of all compensation rights under the class settlement, with no exceptions absent extraordinary court-approved circumstances.

How do I file a claim in the Cash App class action settlement?

Claims are submitted through the official portal maintained by Kroll Settlement Administration, using either the Claimant ID from a breach notification letter or account verification information.

Claimants seeking documented-loss reimbursement must upload supporting materials including bank statements, dispute records, and identity theft reports.

Submitting accurate information and complete documentation in the first submission avoids deficiency notices and processing delays.

What does the CFPB enforcement action mean for Cash App users?

The CFPB filed a federal lawsuit against Block Inc. in December 2024, alleging violations of the Electronic Fund Transfer Act including failure to investigate fraud complaints and improper account terminations.

This proceeding is independent of the class action settlement and could produce separate restitution or penalties ordered by the court.

Users who were harmed specifically by Cash App's dispute denial practices may have remedies available through the CFPB action that are separate from and additive to their class settlement claim.

Closing

The Cash App litigation has moved well past the complaint stage. The settlement is real, the fund is established, and the claims deadline is live. For the millions of users within the class definition, the window to act is narrowing.

Users with documented losses should file complete claims with full supporting documentation before the 2026 deadline. Users who experienced unauthorized transactions exceeding $2,500, or who reside in California with potential CCPA exposure, should speak with a consumer protection or data breach attorney. Initial consultations in this practice area are typically free.

The CFPB enforcement track adds a second potential recovery avenue that most settlement guides ignore entirely. Staying informed on both proceedings is the most complete approach available to affected Cash App users right now.

Author

  • Editorial

    Faiq Nawaz is an attorney in Houston, TX. His practice spans criminal defense, family law, and business matters, with a practical, client-first approach. He focuses on clear options, realistic timelines, and steady communication from intake to resolution.

Sign In

Register

Reset Password

Please enter your username or email address, you will receive a link to create a new password via email.