Updated Stripe Connector Rollback: What It Means for You
Summary
The rollout of Stripe Connector improvements for SCA (Strong Customer Authentication) compliance in June 2021 was an expression of that. However, this update made FormAssembly a target for malicious actors seeking to exploit our customers’ Stripe payment forms. To avoid any unintended harm to our customers’ businesses and reputation, our best course of action is to roll back the recent changes to our Stripe Connector immediately and work on building a better option for SCA-compliant payments. We recently became aware of the fact that threat actors were exploiting a public API key in the Stripe Connector by testing credit cards at a mass scale. Credit card testing is an unfortunate but common practice of malicious actors that we have no tolerance for when it begins to affect our customers.