A data leak published on a cybercrime data-trading forum has exposed live Stripe API credentials for 659 merchant accounts, along with approximately 35 GB of customer- and payment-related data. The exposure affects an estimated 688,363 customer records across merchants in 42 countries, but available evidence indicates that Stripe’s own infrastructure was not breached. The dataset was posted on 18 August 2026 by a forum seller using the alias “Satanic” and made available for free download rather than sold. Ransomnews reportedly reviewed the material offline and notified Stripe before publishing its findings. Independent reporting has also described the campaign as a merchant-secret exposure rather than a compromise of Stripe’s platform.