23 Million User Records Compromised in Gyazo Data Breach

Japanese software company Helpfeel is notifying users of its Gyazo image-sharing service that hackers have accessed their information.

Gyazo is a widely used cross-platform tool that lets users capture screenshots, GIFs, or short screen recordings and instantly generate shareable links.

Helpfeel revealed this week that it recently detected unauthorized access to Gyazo servers. A hacker exploited a vulnerability in its image upload server on September 11, enabling them to execute malicious commands.

The attacker was kicked out the day, but not before accessing a database storing roughly 23.6 million user records.

The compromised Gyazo user information includes names, email addresses, password hashes, user and device IDs, X integration tokens, profile information, usage statistics, and billing information.

Payment card information was not compromised, according to the vendor.

“The approximately 23.62 million affected records include records for anonymous accounts with no registered email address or similar information. We are continuing to determine the actual number of individuals whose personal information was disclosed without authorization,” Helpfeel said .

In addition to the user records, the attacker accessed roughly 490 million image metadata records. This metadata includes information that could allow threat actors to reconstruct and access URLs associated with images uploaded by users.

A list of private images has also been compromised, but the company has not shared any information on volume.

Related : Brevo Supply Chain Attack Injects Malware Into 100,000 Websites

Related : Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom

Related : 280,000 Impacted by Premier Medical Group Data Breach

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

More from Eduard Kovacs

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot

AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals

Pixel Modem Zero-Day Exploited in Targeted Attacks

US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability

Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data

OpenAI Investigates Report Linking AI Agents to RubyGems Attack

Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

NightmareStresser DDoS Service Disrupted in International Operation

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites

Critical Orkes Conductor Vulnerability Exploited in Attacks

MIND Secures $72 Million for AI-Powered DLP

Check Point, Kaspersky, Tanium Patch Product Vulnerabilities

Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels

OpenAI Says Its Models Searched GitHub for Leaked API Keys During Training

Virtual Event: Attack Surface Management Summit 2026

Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.

Webinar: Building Continuous Authorization at Scale

Explore what it takes to operationalize continuous authorization at scale, including the technical, organizational, and cultural changes required.

Flipboard Whatsapp Whatsapp Email