Cash App alerts 8 million customers to data breach

Date:
Wed, 06 Apr 2022 10:17:03 +0000

Description:
The SEC has been alerted and an investigation is ongoing.

FULL STORY ======================================================================

Mobile payments service Cash App has suffered a data breach after an ex-employee accessed sensitive customer data.

The company behind the service, Block (formerly Square), reported the
incident to the US Securities and Exchange Commission (SEC) earlier this
week.

In the filing, the company explained that the person was allowed to access this data as part of their past job responsibilities, but that access should have been barred the moment they left. Block has so far declined to explain why the employee was still able to access the data . TechRadar needs you!

We're looking at how our readers use VPNs with different devices so we can improve our content and offer better advice. This survey shouldn't take more than 60 seconds of your time, and entrants from the UK and US will have the chance to enter a draw for a 100 Amazon gift card (or equivalent in USD). Thank you for taking part.

Click here to start the survey in a new window << Personally identifiable information

The motive behind the exfiltration is unclear, but we know the person took customers' full names and brokerage account numbers, and in some cases, brokerage portfolio value, brokerage portfolio holdings, and stock trading data.

Usernames, passwords and other identity -related information were not accessed, it was said.

Block also refrained from revealing the number of customers affected, but did say it was reaching out to more than eight million current and former customers about the breach. All of them reside in the United States.

At Cash App we value customer trust and are committed to the security of customers information, a spokesperson told TechCrunch.

Upon discovery, we took steps to remediate this issue and launched an investigation with the help of a leading forensics firm. We know how these reports were accessed, and we have notified law enforcement. In addition, we continue to review and strengthen administrative and technical safeguards to protect information. Read more

Most companies are clueless when it comes to stopping insider threats

Keeping a handle on threats to your hybrid workforce

How to detect and defend against insider threats

Earlier this week, cybersecurity experts from Imperva published a new report that suggested the majority of companies fail to take insider threat as seriously as they should.

Based on a survey of 500 security professionals, the report revealed that companies are often guilty of underestimating the extent of the threat posed by insiders, a conclusion perhaps reinforced by the Cash App breach.

According to Imperva, businesses need to add insider risk to their overall data protection strategy, and set up a diverse insider threat detection
system that combines several tools. Know exactly who's accessing what data with the best identity management solutions on the market

Via TechCrunch



======================================================================
Link to news story: https://www.techradar.com/news/cash-app-alerts-8-million-customers-to-data-bre ach/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)