Misconfigured Server Run by Hackers Leaks 345,000 Stolen Credit Cards

**Executive Summary:** Researchers discovered a misconfigured, unauthenticated server belonging to Jerry’s Store — a carding marketplace — which leaked approximately 345,000 stolen credit cards (including card numbers, CVVs, cardholder names and addresses) after an AI-assisted development tool (Cursor) generated an open web directory; the exposed dataset was actively used to validate working cards and is estimated to be worth up to $2.6M on underground markets, highlighting both criminal activity and AI-driven configuration risks.