According to CoinMeta, and based on an investigation by ransomnews, a data trading forum publicly released the API keys of 659 Stripe merchant accounts on August 18th, along with approximately 35GB of customer and payment data, involving around 688,000 customer records. The leaked keys included 650 live, secret, keys keys, and 9 restricted and keys keys. Among these, 519 accounts were recorded by the collectors as having both the authority to receive and transfer funds. ransomnews emphasized that their own system was not compromised; the relevant keys may have come from information-stealing Trojans, public code repositories, exposed environment files, or misconfigured backups.