Hackers expose donor data from Russian fundraisers for Ukrainians, political prisoners
Hackers breached the Stripe-WooCommerce integrations of Russian fundraisers Davayte and You Are Not Alone, exposing donor emails and partial card details.
Unknown hackers accessed the payment accounts of two Russian fundraising projects, Davayte and You Are Not Alone, in mid-August via a shared Stripe-WooCommerce integration used to run online auctions. Exposed data included donor email addresses and, in some cases, the last four digits of payment cards and issuing bank names; full card numbers, cardholder names, and donation details were not taken. Stripe blocked the unauthorized access before the entire donor email database could be downloaded and found no evidence of fraudulent transactions. Attribution remains unclear, with organizers unable to rule out Russian security services; both groups are designated 'undesirable' organizations in Russia, making donor identities sensitive, and a separate alleged leak of data from 669 Stripe merchants by a hacker named 'Satanic' has no confirmed connection.
- Both incidents traced to the same entry point: a Stripe-WooCommerce integration used to run online auctions.
- Exposed data included donor emails, last four card digits, and issuing banks; no full card numbers or names.
- Stripe blocked the unauthorized access before the full donor email database was downloaded; no fraudulent transactions found.
- Attribution unclear; organizers cannot rule out Russian security services, and donors to 'undesirable' groups risk prosecution.
- Hacker 'Satanic' separately leaked data from 669 alleged Stripe merchants, though timelines indicate no connection to these breaches.
- ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1213 Data from Information Repositories
- Vendors
- StripeWooCommerceWordPress
- Products
- WooCommerceStripe
- Threat actors
- Satanic
From the original article
3 min read at therecord.media
Hackers reportedly gained access to payment accounts used by two Russian fundraising projects supporting Ukrainians and political prisoners, exposing donor email addresses and limited payment card information. The unknown threat actor targeted Davayte, which raises money for civilians in Ukraine affected by Russia’s invasion, and You Are Not Alone, a project supporting Russian political prisoners and their families.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.