Block Wins Dismissal of Shareholder Lawsuit Over 2021 Cash App Breach

Block (XYZ.N), the fintech company led by Jack Dorsey, has defeated a shareholder lawsuit tied to a 2021 Cash App data breach that exposed information from about 8.2 million users.

The Case

  • Shareholders accused Block of:

    • Inflating its stock price by failing to disclose weak data security before the breach.

    • Delaying disclosure until April 2022, nearly four months after the incident.

    • Misleading Afterpay shareholders ahead of its $29 billion acquisition of the BNPL firm in January 2022.

Court’s Ruling

  • U.S. District Judge Margaret Garnett in Manhattan dismissed the case.

  • She ruled there was no evidence Block intended to defraud investors.

  • General statements about data security risks were not guarantees of system safety.

  • Shareholders also failed to prove:

    • A unique link between alleged misstatements and the Afterpay deal.

    • That Block executives had a specific motive or benefit from the alleged omissions.

Context

  • Block has faced regulatory pressure over Cash App:

    • $80M settlement with 48 U.S. state regulators (Jan 2024).

    • $40M settlement with New York (Apr 2024).

  • Despite these issues, Cash App processed $283B in inflows in 2024 and had 57M monthly active users by year-end.

What’s Next

  • The case (In re Block Inc Securities Litigation, No. 22-08636) is now dismissed, though investors could still pursue an appeal.

  • For Block, the ruling removes a major legal overhang as it continues to scale Cash App and integrate Afterpay.