Hundreds of Leaked Stripe Merchant Keys Expose Payment and Payout Capabilities
Brief
Hundreds of leaked Stripe merchant keys have exposed a serious risk for online businesses and their customers.
The collection contains active credentials tied to hundreds of accounts, allowing a criminal to use payment tools that should remain strictly private.
The data was posted free on a data-trading forum on August 18. It includes roughly 35 GB of customer and payment information gathered from 659 merchant accounts, affecting about 688,000 people.
The incident does not indicate that Stripe’s systems were breached.
RansomNews said in a report shared with Cyber Security News (CSN) that the analysts examined the material offline and notified Stripe before publication, avoiding access to the exposed payment records themselves.
This is not a malware outbreak or an exploit against a payment platform. It is a credential exposure with damaging consequences.