Gyazo Image-Sharing Service Suffers Data Breach, Compromising 23 Million User Records
Japanese software company Helpfeel has announced a data breach affecting its Gyazo image-sharing service. A hacker exploited a vulnerability in Gyazo's image upload server on September 11, gaining unauthorized access and executing malicious commands. Although the attacker was removed the following day, they managed to access a database containing approximately 23.6 million user records. The compromised information includes names, email addresses, password hashes, user and device IDs, X integration tokens, profile information, usage statistics, and billing details. Helpfeel clarified that payment card information was not compromised. Additionally, about 490 million image metadata records were accessed, which could potentially allow threat actors to reconstruct and access URLs associated with user-uploaded images. A list of private images was also compromised, though the volume has not been disclosed. Helpfeel is currently working to determine the exact number of individuals whose personal information was ex...
