Block (XYZ.N), the fintech company led by Jack Dorsey, has defeated a shareholder lawsuit tied to a 2021 Cash App data breach that exposed information from about 8.2 million users.
The Case
-
Shareholders accused Block of:
-
Inflating its stock price by failing to disclose weak data security before the breach.
-
Delaying disclosure until April 2022, nearly four months after the incident.
-
Misleading Afterpay shareholders ahead of its $29 billion acquisition of the BNPL firm in January 2022.
-
Court’s Ruling
-
U.S. District Judge Margaret Garnett in Manhattan dismissed the case.
-
She ruled there was no evidence Block intended to defraud investors.
-
General statements about data security risks were not guarantees of system safety.
-
Shareholders also failed to prove:
-
A unique link between alleged misstatements and the Afterpay deal.
-
That Block executives had a specific motive or benefit from the alleged omissions.
-
Context
-
Block has faced regulatory pressure over Cash App:
-
$80M settlement with 48 U.S. state regulators (Jan 2024).
-
$40M settlement with New York (Apr 2024).
-
-
Despite these issues, Cash App processed $283B in inflows in 2024 and had 57M monthly active users by year-end.
What’s Next
-
The case (In re Block Inc Securities Litigation, No. 22-08636) is now dismissed, though investors could still pursue an appeal.
-
For Block, the ruling removes a major legal overhang as it continues to scale Cash App and integrate Afterpay.