Cash App data breach settlement

From Settlements, in the HARD wiki · Updated
This article is about the class action settlement over the Cash App data breach. For every settlement, see Settlements.

Yes. The Cash App data breach settlement is real: a $15 million class action settlement in federal court, Northern District of California, run by Angeion Group. Payments to people who filed a valid claim are going out now.

The administrator's November 2, 2026 update says distribution of payments to approved claims is ongoing and commenced on October 7, 2026; claim determinations and appeals are final.

Is it real?

Yes. The case is Salinas, et al. v. Block, Inc. and Cash App Investing, LLC, case number 22-cv-04823-SK, in the US District Court for the Northern District of California. The court appointed Angeion Group to run it, and its only official site is cashappsecuritysettlement.com.

How the real notice reached people. Notices carried a Notice ID (the site has a 'Look Up Notice ID' tool, currently disabled). The site does not publish the email sender address or a scam warning. Claim denials came by notice with 20 days to ask for Attorney Review; that review is now complete.

To tell a real message from a scam:

  1. The only official site is cashappsecuritysettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
  2. Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
  3. Nobody needs your passwords.The administrator never asks for your Cash App password, your online banking login or a code texted to you. Payment details go only into the claim form on cashappsecuritysettlement.com.
  4. Check by phone.If you aren’t sure a message is real, call the administrator on 1-866-615-9740, the number on cashappsecuritysettlement.com, not one in the message.
  5. Claims have closed.The deadline was 18 November 2024. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on cashappsecuritysettlement.com instead.

Who qualifies

Current or former customers of Cash App and/or Cash App Investing whose personal information or account was accessed or obtained without authorization, or who had unauthorized or fraudulent withdrawals or transfers, or a deficiency in error resolution, in a Cash App account or linked account from August 23, 2018 through August 20, 2024 (the Notice Date).

Size: 158,011,266 potential class members (court final approval order).

It covers people in the United States only. If you live elsewhere, you are not part of it, whatever a message says.

How much

The total settlement is $15,000,000.00. What each person can claim:

BenefitAmountNotes
Out-of-pocket lossesup to $2,500.00third-party documentation; losses from August 23, 2018 to August 20, 2024 not already reimbursed
Lost timeup to three (3) hours at a rate of $25.00 per hourtime spent on a data incident, unauthorized account event or error resolution
Transaction lossesdocumented unreimbursed losses from an Unauthorized Account Eventneeds proof you told Block/Cash App, a police report, or other proof the administrator accepts; no cap stated on the site
Pro rata adjustmentreduced pro rata if the fund runs short; leftovers shared pro rata among approved claimantsper-person final amounts not published

An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.

Deadline and payout

  • Claim deadline: (passed). The exclusion and objection deadlines were extended from 2024-11-01 to 2024-11-18; the claim deadline itself shows no extension.
  • Opt-out and objection deadline: .
  • Final approval hearing: .
  • Final approval granted: .

Payout. Payments to approved claims began October 7, 2026 and are ongoing (administrator update of November 2, 2026). Per-person amounts are not published.

The administrator: “commenced on October 7, 2026.”

Filing and payment

  1. Claims closed on November 18, 2024; late claims are not accepted.
  2. Deficiency and Attorney Review appeals are finished and no further appeals are accepted.
  3. If you filed an approved claim, watch for your payment and check cashappsecuritysettlement.com for updates, or call 1-866-615-9740.

Official site: cashappsecuritysettlement.com. Phone: 1-866-615-9740. Mail: Cash App Security Settlement Administrator, 1650 Arch Street, Suite 2210, Philadelphia, PA 19103 (exclusions went to P.O. Box 58220, Philadelphia, PA 19102).

The breach, and what to do today

The settlement covers (1) a data security incident Cash App Investing disclosed in April 2022, when a former Cash App Investing employee accessed account data without permission; (2) a data security incident Block disclosed in October 2023, when an unauthorized user got into certain Cash App accounts through recycled phone numbers linked to them; and (3) alleged unauthorized or fraudulent withdrawals and transfers and poor error resolution on Cash App accounts.

What was exposed: not listed on the settlement site; the site describes 'account data' accessed by a former employee (2022) and accounts accessed through recycled phone numbers (2023).

A settlement pays for what already happened. The data is still out there, so do these now:

  1. Put a PIN on your phone account.Ask your mobile provider for a port-out PIN or number lock, so no one can move your number to their SIM.
  2. Distrust messages about Cash App and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.

To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.

Not published yet

The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:

  • How much each person’s cash payment will be. It depends on how many people claim.
  • Exactly which details were exposed: the settlement papers describe it only as personal information.

Questions

Is the Cash App data breach settlement legit?

Yes. It is Salinas, et al. v. Block, Inc. and Cash App Investing, LLC, case 22-cv-04823-SK, in the US District Court for the Northern District of California. Angeion Group runs it for the court, and the only official site is cashappsecuritysettlement.com.

Who qualifies for the Cash App settlement?

Current or former customers of Cash App and/or Cash App Investing whose personal information or account was accessed or obtained without authorization, or who had unauthorized or fraudulent withdrawals or transfers, or a deficiency in error resolution, in a Cash App account or linked account from August 23, 2018 through August 20, 2024 (the Notice Date).

How much will I get from the Cash App settlement?

Up to up to $2,500.00 for losses you can prove. The total settlement is $15,000,000.00. Final amounts depend on how many valid claims there are.

What is the deadline for the Cash App settlement?

The claim deadline was 18 November 2024. It has passed.

When will the Cash App settlement pay out?

Payments to approved claims began October 7, 2026 and are ongoing (administrator update of November 2, 2026). Per-person amounts are not published.

Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.

Sources

Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.

  1. Cash App Security Settlement: home page (updated November 2, 2026), Angeion Group (settlement administrator), read 7 Nov 2026: payments commenced October 7, 2026; important dates.
  2. Cash App Security Settlement: FAQs, Angeion Group, read 7 Nov 2026: class definition, benefits, contact, appeals.
  3. Order on Motion for Final Approval (Dkt. 157, filed 03/27/25), US District Court, N.D. Cal. (Magistrate Judge Sallie Kim), read 7 Nov 2026: 667,985 claims of 158,011,266 potential members; 191 opt-outs; $5 million fees with $500,000 held back; Angeion named.