In the US unauthorized access of a private system, particularly with financial records or other protected data, is a crime: https://www.law.cornell.edu/uscode/text/18/1030 Doesn't matter how you got access, it just matters that you did it. It is very broad and very vague, but a lot of hackers in the 90's were put in federal prison for some time under this and similar laws.

I would stop posting about this on the internet.

You probably have. You just don't know it.

Fair enough

To know what you just admitted to knowing, you did commit a crime in at least some jurisdictions (US being one). Rarely prosecuted, but still.

[https://www.law.cornell.edu/uscode/text/18/1030] 18 US Code 1030, section (a)2(a). Section (b) is something to be wary of as well.

Section (c) seems to say it’s ONLY up to 5 years in federal prison though and $1k fine.

Honestly, doubt anyone would bother if you didn’t try to profit from it, but who knows.

Edit: add link to US Code

You've seeked for a key, found it, then deliberately gave it to burglars, in which country is that not a crime?

I understand the urge to share these feelings to someone, but this is way stupid. I've flagged your post btw.

.. deliberately given it to burglars? Absolutely nil has happened besides finding this.

good luck convincing anyone that a site called 'hacker news' isn't full of burglars

as a matter of fact i'm burgling right now

Thanks for the laugh. Okay, guilty by association.

Like 2 days ago you identified yourself as being in the Netherlands. Not sure how much other private info you have leaked in your comments. I recommend deleting everything now while you hopefully still can.

This seems like bad advice at this point. I’m not a lawyer. Deleting things could be perceived as destroying evidence. Before doing anything get a lawyer involved.

First of all, I'm only telling a story of another unnamed person - besides, what exactly are you so worried about?

That someone will try to locate you and extract the information. You said that there are millions in these accounts and in some cases you can even withdraw money. That sounds like Christmas for criminals.

Do yourself a favor and never use this alias in here again. Or anywhere else for that matter. Even better delete the whole freaking post.

I don't have access to anything. Besides, I'm surprised that they would be the only person you know that has access to money.

Knowing someone who has money isn't the same as knowing someone who can provide access to thousands of active API keys to crypto exchange accounts. I'm not trying to spook you, but you don't seem to understand the severity of what you've just told to the public Internet. We're a bit paranoid in here because we've seen and heard a lot of weird shit over the years. Do yourself a favor and take this seriously, will you.

My car is unlocked in my driveway with the keys inside (it really is, I live in a safe country) In many jurisdictions you’ve done the equivalent of open the doors, sit inside, start the engine and take it for a roll around the block. Except instead of a car worth a few thousand dollars it’s a crypto exchange with possibly millions of dollars of assets.

That seems like an unfit comparison. If anything, they have found your key on the sidewalk, sat inside the car for 10 seconds, and then left again.