Stripe Breach Scanner
Is your payment infrastructure in the breach?
Attackers are quietly harvesting exposed Stripe API keys and merchant credentials — and abusing payment access before anyone notices. Enter your domain to see if yours is already exposed.
Read our research on the breach33gb
Data
662
Organizations
688,363
Customer records
About the campaign
What is the Stripe breach?
On August 18, 2026, threat actor SATANIC published a ~33GB dataset on an underground forum — 662 vendor databases and 1,033 compromised Stripe API keys, extracted programmatically via the Stripe API. It's labeled an initial batch (V1), with the actor claiming ~20,000 keys overall.
Who is affected?
313 confirmed organizations across 659 database entries and 688,363 customer records. Exposed data includes invoices, transactions, balances, payouts, promo codes and API credentials — some keys are live sk_live_ credentials with charge capabilities enabled.
How CyberXTron helps
CyberXTron gives your security team a clear path from alert to action — turning exposure into prioritized, practical guidance so issues get fixed before attackers can exploit them.