According to Ransomnews, a dataset published on a data-trading forum contained API keys tied to 659 Stripe merchant accounts, along with roughly 35GB of customer and payment data covering 688,363 customer records. The leak included 650 live secret keys and nine restricted keys. Collector metadata indicated that 573 accounts could accept payments, 531 could make payouts, and 519 had both capabilities, though Ransomnews did not test the keys itself. The outlet said Stripe’s own systems were not compromised and that no full card numbers were present in the dataset.
