Analyzing Stripe Breach: Confirmed Vendor Exposure and Claims of 20,000 Compromised APIs

Live API keys expose 688,363 Stripe customer records across 42 countries

Researchers theorize merchants’ secret keys had been compromised to enable access to 35 GB of data through ordinary API requests An 18 August, 2026 data-trading forum post has exposed a cache of live Stripe API keys tied to 659 merchant accounts, with the resulting data linked to an estimated 688,363 customer records across 42 countries. The largest concentration of affected merchants was in the United States (212 accounts), followed by the Unit…

Analyzing Stripe Breach: Confirmed Vendor Exposure and Claims of 20,000 Compromised APIs

Analyzing Stripe Breach: Confirmed Vendor Exposure and Claims of 20,000 Compromised APIs On August 18th, 2026, a data release occurred on the illicit forum pwnforums. The threat actor known as Satanic published sensitive information extracted from hundreds of vendors utilizing the Stripe payment platform. Figure 1: The initial forum post by Satanic announcing the breach, detailing the compromise of databases and 1,033 API keys, totaling 33GB, a…