Gyazo Breach Exposes 23.62 Million User Records

• •23.62 million user records and 490 million image metadata records exposed.
• •Attackers exploited a vulnerability in Gyazo's image upload server.
• •Users advised to change passwords and monitor for suspicious activity.

Helpfeel Inc. confirmed a security breach at Gyazo, its image-sharing service, which exposed approximately 23.62 million user records and 490 million image metadata records. The breach occurred on September 11, 2026, when a third party exploited a vulnerability in Gyazo's image upload server, allowing unauthorized access to the database. The exposed user data includes names, email addresses, and integration tokens, but no payment information was compromised. Helpfeel has blocked the access routes used in the attack and is investigating the incident's scope and impact. Users are advised to change their passwords and monitor for suspicious communications. The investigation is ongoing, and further details may emerge.