That’s untrue. While I would be willing to believe that for a brief period of time there was a bug that could expose it, having been at Stripe between 2017 and 2020, it was my experience that they had a robust system preventing PANs from being disclosed.

That included efforts to mask PANs that were in the wrong place.

We didn’t want them in our internal logging systems, and we certainly didn’t want to leak them back to the merchants.