Ask HN: Has an API key issuer ever leaked their own customers’ API keys

There’s been plenty of examples where API keys were leaked due to poor API key management, such as the Algolia or Mailgun report.

There are also examples where user data was compromised due to bad authentication rules or logic of an API

However, I’m curious if an API developer / issuer ever has leaked their own customers’ API Keys while their APIs security is otherwise airtight, I.e. Stripe leaking Stripe API Keys.