Over 50,000 Stripe API Keys Exposed in Public Code Repositories

Security researchers at Ransomnews have identified a massive leak involving over 50,000 unique Stripe merchant API keys exposed through public code repositories, GitHub Actions logs, and misconfigured web servers. Many of these keys remain active, posing a severe risk of fraud. A dataset discovered on a data trading forum on August 18, 2026, contained valid keys for 659 merchant accounts along with 35 GB of customer and payment data. While Stripe's own infrastructu