# Article Sharing Postman Public Workspace Data Leak

**URL:** <https://community.postman.com/t/article-sharing-postman-public-workspace-data-leak/84044>\
**Category:** API Pulse\
**Tags:** data, workspaces\
**Created:** [August 26, 2025, 8:30pm UTC](https://community.postman.com/t/article-sharing-postman-public-workspace-data-leak/84044 "2025-08-26T20:30:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![shadowm0nkey](https://avatars.discourse-cdn.com/v4/letter/s/41988e/32.png) [@shadowm0nkey](https://community.postman.com/u/shadowm0nkey)\
**Post date:** [August 26, 2025, 8:30pm UTC](https://community.postman.com/t/article-sharing-postman-public-workspace-data-leak/84044/1 "2025-08-26T20:30:17Z")

</div>

Surprised not to find something here on this. Hopefully no one had credentials saved there.

> **[Postman Data Leak - 30,000 Publicly Accessible Workspaces Could Lead Massive...](https://cybersecuritynews.com/postman-data-leak-30000-publicly-accessible-workspaces-could-lead-massive-hack/)**
>
> Researchers uncovered a widespread and alarming trend involving data leaks from Postman, a widely used cloud-based API development and testing platform. The investigation reveals that improper management of Postman workspaces has resulted in over...

---

<div class="post-metadata">

**Author:** ![gbadebo-bello](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/gbadebo-bello/32/12175_2.png) [@gbadebo-bello](https://community.postman.com/u/gbadebo-bello)\
**Post date:** [August 27, 2025, 10:28am UTC](https://community.postman.com/t/article-sharing-postman-public-workspace-data-leak/84044/2 "2025-08-27T10:28:22Z")

</div>

Hi @shadowm0nkey. Welcome to the Postman Community :postman:.

Thank you for sharing this article. At Postman, we are committed to the security and safety of everyone who uses the platform. Our head of security, Sam Chehab, recently echoed this in a blog post. [https://blog.postman.com/engineering/postman-free-is-secure-by-design/](https://blog.postman.com/engineering/postman-free-is-secure-by-design/)

This article also highlights ways in which you can secure your data and safely work in Postman. Please do check it out:

> [@Stop Exposing Secrets! Secure Your APIs in Postman Like a Pro](https://community.postman.com/t/stop-exposing-secrets-secure-your-apis-in-postman-like-a-pro/76420/1):
>
> API security is crucial, as it directly impacts your business’s success and safety. How well you secure your APIs can make or mar your product, and it is of utmost importance to spend time thinking about security.
> 
> I have seen developers work in Postman without properly securing their credentials, often leaving API keys exposed in shared environments or logging sensitive data in the console. For example…
> 
> [Stop Exposing Secrets! Secure Your APIs in Postman Like a Pro](https://community.postman.com/t/stop-exposing-secrets-secure-your-apis-in-postman-like-a-pro/76420)