Leaked Stripe secret key — what you owe the attacker

Your live Stripe secret key grants full access to your Stripe account — create charges, issue refunds, pull customer data. Rotation is immediate; fraud reversal depends on how fast you rotated and what the attacker did.