Back Securityaffairs.Co

50,000 Stripe Secrets Leaked in Public Code

Securityaffairs.Co •Pierluigi Paganini • August 19, 2026

Over 50,000 exposed Stripe API keys show how leaked secrets can enable fraud, data access and account abuse within hours. Ransomnews researchers have documented a large-scale leak of Stripe merchant API keys found exposed in public code repositories, GitHub Actions logs, and misconfigured web servers, with over 50,000 unique keys identified in total. The research […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Massive Stripe API Breach Exposes 20,000 Compromised Keys and Customer Data On August 18, 2026, a threat actor named Satanic released sensitive data from 669 vendors using Stripe, claiming to possess 20,000 compromised APIs. The initial dump included 1,033 API keys and 33GB of data, affecting approximately 688,363 customer records. The data leak, advertised as a staggered release, contains detailed transaction information, including personal identifiable information (PII) and financial metadata. Other reports indicate that over 50,000 Stripe API keys were also leaked through public code repositories. The breach did not involve a compromise of Stripe's infrastructure but poses significant risks to affected vendors and their customers. Security researchers are currently analyzing the data to assess the full impact and potential for exploitation. 4 sources 66

Extracted Entities

50,000 Stripe Secrets Leaked in Public Code

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (2)

MITRE ATT&CK (1)

Platforms (1)