BLOCK, INC.
ent_d7086f236baf0853d10d6992
Disclosures
5
State AG · 4 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
10,801
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- BLOCK, INC.
- Normalized
- block— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300OHIIUWSTIZME52
- SEC EDGAR CIK
- 0001512673
- Domain
- block.xyz
Disclosure history (5)newest first
- Massachusetts State AGas reporting2026-07-18
Block Engineering LLC, Block Mems LLC, and Block Engineering Inc. issued a Massachusetts Attorney General data privacy incident notice. The breach involved personal information consisting of names combined with B2B data elements. The company is offering 24 months of complimentary identity monitoring services (credit monitoring, fraud consultation, and identity theft restoration) provided by Kroll to affected individuals.
- Indiana State AGas victim2023-09-26
Block Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-01-12 and was reported on 2023-09-26. 195 Indiana residents were affected. 10,801 individuals affected in total.
- Montana State AGas victim2023-09-22
Block, Inc. (Cash App) notified Montana residents of unauthorized access to accounts using recycled phone numbers. Affected data included names, Cash App account/routing numbers, and card details (number, expiration, CVV). Block canceled affected cards, engaged forensic experts, notified law enforcement, and offered two years of credit monitoring.
- Massachusetts State AGas victim2023-09-22
Block, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-09-22. 22 Massachusetts residents were affected. The report records the breach type as electronic.
- Illinois State AGas victim2023-01-01
BLOCK, INC. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-657). The register records the breach as discovered on January 12, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.