Block disclosed that a disgruntled former employee downloaded comprehensive customer investment reports without authorization after their employment had concluded. The compromised data files included full names, stock brokerage account numbers, and portfolio valuation metrics.