AmpUp Data Breach Exposes Personal Information in Stripe API Incident On October 25, 2025, AmpUp, Inc., a provider of electric vehicle charging management technology, detected unauthorized activity within its Stripe online payment system. The company launched an investigation, confirming that an unauthorized third party exploited AmpUp’s Stripe API key to conduct fraudulent financial transactions on the same day. As a result, sensitive personal data—including names and other identifiers—may have been accessed or exfiltrated. AmpUp, which serves commercial, workplace, fleet, and residential EV charging networks, has not disclosed the full scope of the breach or the number of affected individuals. The incident prompted Edelson Lechtzin LLP, a national class action law firm, to announce an investigation into potential legal claims on behalf of those impacted. The firm is exploring remedies for individuals whose data may have been compromised. The breach highlights risks associated with third-party payment integrations, particularly in sectors handling financial and personal data. Further details on the investigation or AmpUp’s response remain pending.