Massive Stripe API Breach Exposes 20,000 Compromised Keys and Customer Data

On August 18, 2026, a threat actor named Satanic released sensitive data from 669 vendors using Stripe, claiming to possess 20,000 compromised APIs. The initial dump included 1,033 API keys and 33GB of data, affecting approximately 688,363 customer records. The data leak, advertised as a staggered release, contains detailed transaction information, including personal identifiable information (PII) and financial metadata. Other reports indicate that over 50,000 Stripe API keys were also leaked through public code repositories. The breach did not involve a compromise of Stripe's infrastructure but poses significant risks to affected vendors and their customers. Security researchers are currently analyzing the data to assess the full impact and potential for exploitation.

Key Points: • Satanic released sensitive data from 669 vendors using Stripe, claiming 20,000 compromised APIs. • The initial data dump contained 1,033 API keys and affected approximately 688,363 customer records. • Over 50,000 Stripe API keys were also leaked through public code repositories, increasing risks.