FlagThis — Daily Cybersecurity Intelligence Briefing

On August 19, 2026, live Stripe Merchant API keys were publicly exposed, compromising payment credentials for an estimated 659 to 20,000 merchant accounts and exposing roughly 688,000 customer records across 42 countries. The leak, likely stemming from vendor-managed environments or inadequate secret management, revealed a 35 GB dataset containing secret and publishable keys, enabling unauthorized transactions and data exfiltration. Immediate key rotation and transaction audits are required to mitigate ongoing risk.