45
Chess.com Leak Exposes 7.3 Million Users — Evidence Points to Scraping
A free 15.5 GB leak exposed 7.3 million Chess.com user records; analysis suggests large-scale scraping via find-friends rather than a server breach.
A 15.5 GB dump containing 7,337,395 Chess.com records appeared on leak forums posted by user V0idix at no cost. Ransomnews confirmed the data is genuine by validating embedded v1 UUID timestamps against registration dates, but found daily-batch collection over nine days and ~7.4% duplicate records, pointing to scraping. The schema includes emails, ratings, subscription tiers and internal Google Ad Manager audience segments not exposed in the public API, and contains no passwords or payment data. Chess.com reported a similar 828,000-record 2023 leak from find-friends abuse and said then that it was not a breach.
48
45
45
45
45
50,000 Stripe Secrets Leaked in Public Code
Over 50,000 Stripe merchant API keys leaked via public code and logs; 659 merchant accounts' data offered on trading forum.
Ransomnews researchers identified over 50,000 unique Stripe merchant API keys exposed in public GitHub repositories, GitHub Actions logs, and misconfigured web servers. A dataset on a data-trading forum dated August 18, 2026 contained live keys for 659 merchant accounts plus roughly 35 GB of customer and payment data. Researchers demonstrated a leaked key enabled accessing customer lists, creating fraudulent payment links, and making test charges within 17 hours. Stripe itself was not compromised; over 3,000 misconfigured web servers revealed Stripe-related strings, with about 12% containing working keys.
60
45
45
45
45
45
45
Veradigm Confirms Patient Data Exposed in Third-Party Data Breach
Veradigm disclosed a third-party vendor breach exposing patient data including Social Security numbers via stolen vendor API credentials.
Veradigm filed an 8-K with the SEC on September 8, 2026, disclosing that attackers used credentials stolen from a third-party vendor to access a specific vendor-facing API and download patient personal data, including Social Security numbers for some individuals. No clinical or medical information was compromised, and Veradigm's internal infrastructure was not breached directly. The company activated incident response, notified law enforcement, and is offering credit monitoring to affected individuals.
55
45
45
45
45
45
45
45
45
45
45
45
45
45
45
45
45
45
45
45
45
45