50,000 Stripe Secrets Leaked in Public Code

Ransomnews researchers found over 50,000 exposed Stripe API keys in public repositories, GitHub Actions logs, and misconfigured servers; a dataset published on a forum contained live keys for 659 merchant accounts and roughly 35 GB of customer/payment data. The team validated many keys as active and showed attackers could rapidly access customer lists, create fraudulent payment links, charge cards, issue refunds, and modify webhooks, and the report recommends auditing and rotating keys, using restricted keys, enabling secret scanning and Stripe Radar rules.