The lawsuit against Cash App and its parent company, Block Inc., stems from two major data breaches. The first breach occurred in December 2021 when a former employee accessed sensitive information of 8.2 million users without authorization. The second breach involved unauthorized access through recycled phone numbers, affecting users' accounts and personal data.