Former employee downloaded Cash App account info of 8.2M users (SEC Form 8k)

First, the filing only mentions that they are contacting 8.2 million customers. It doesn’t confirm that those customers definitely had their data accessed. So it’d be interesting to know what their level of confidence/precaution is there.

> The information in the reports included full name and brokerage account number (this is the unique identification number associated with a customer’s stock activity on Cash App Investing), and for some customers also included brokerage portfolio value, brokerage portfolio holdings and/or stock trading activity for one trading day.

The “some customers” is doing heavy lifting here. If that’s 10%, that’d be enormously damaging, particularly if we’re talking about millions of customers. That information is potentially very dangerous in the wrong hands

Use one of the other terrible options instead, e.g. Venmo.

The reports did not include usernames or passwords, Social Security numbers, date of birth, payment card information, addresses, bank account information, or any other personally identifiable information. They also did not include any security code, access code, or password used to access Cash App accounts. Other Cash App products and features (other than stock activity) and customers outside of the United States were not impacted.