Users of the popular online payment site Cash App may be eligible to claim part of a $15 million settlement related to a series of data breaches.

According to the settlement website, Block Inc., owner of Cash App, was “negligent and breached other obligations” to users when they “failed to implement appropriate controls to prevent unauthorized access” to accounts. In 2022, some 8.2 million Cash App users were notified of a breach involving a former employee who downloaded investment reports that included full names, brokerage account numbers, portfolio values and holdings and one day of stock trading. Then, a year later, an “unauthorized user” gained access to Cash App information by using phone numbers linked to the earlier accounts.

Block and Cash App Investing have denied liability or wrongdoing but agreed to the $15 million settlement.

Who is eligible for the settlement?

To be eligible, someone must have been a user of Cash App or Cash App Investing whose information was accessed without permission or who had unauthorized or fraudulent withdrawals or transfers from their account between Aug. 23, 2018 – Aug. 20, 2024.

Customers who can provide out-of-pocket losses are eligible for up to $2,500 in reimbursement but must provide “third-party documentation,” to prove the losses. You can also submit a claim for reimbursement of up to three hours of lost work at $25 an hour. You can see more on the required documentation here.

“Out of pocket” expenses could include things like costs associated with credit monitoring or identity theft insurance or requesting a credit report, costs associated with a credit freeze or opening a new bank account or getting a replacement credit card.

The deadline to submit a claim is Nov. 18. You can submit a claim here.