Reported by 9 outlets
Helpfeel Confirms Gyazo Breach Exposing 23 Million User Records Helpfeel's Gyazo service suffered a data breach after attackers exploited an
Why this score
- Breadth
- 2.00 / 2.0 · 9 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.70 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.23 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Helpfeel Confirms Gyazo Breach Exposing 23 Million User Records Helpfeel's Gyazo service suffered a data breach after attackers exploited an
beyondmachines.net · 25d ago · September 18th, 2026
Helpfeel Confirms Gyazo Breach Exposing 23 Million User Records Helpfeel's Gyazo service suffered a data breach after attackers exploited an
via Mastodon https://beyondmachines.net/event_details/helpfeel-confirms-gyazo-breach-exposing-23-million-user-records-q-t-a-h-h/gD2P6Ple2L
-
update from malware.news
Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
malware.news · 26d ago · September 17th, 2026
Swati Khandelwal reports: A security breach at Gyazo, Helpfeel’s image-sharing service, exposed about 23.62 million user records, including email addresses and password hashes, the Kyoto-based company said in a notice published Wednesday. It also exposed about 490 million image metadata records, mostly for images from January 2019 or earlier, including the IDs that make up… Source Article Link: https://databreaches.net/2026/09/17/gyazo-breach-exposes-23-62-million-user-records-and-490-million-image-metadata-records/
-
update from securityweek.com
23 Million User Records Compromised in Gyazo Data Breach
securityweek.com · 25d ago · September 18th, 2026
Japanese software company Helpfeel is notifying users of its Gyazo image-sharing service that hackers have accessed their information. Gyazo is a widely used cross-platform tool that lets users capture screenshots, GIFs, or short screen recordings and instantly generate shareable links. Helpfeel revealed this week that it recently detected unauthorized access to Gyazo servers. A hacker exploited a vulnerability in its image upload server on September 11, enabling them to execute malicious commands. The attacker was kicked out the next day, but not before accessing a database storing roughly 23.6 million user records. The compromised Gyazo user information includes names, email addresses, password hashes, user and device IDs, X integration tokens, profile information, usage statistics, and billing information. Payment card information was not compromised, according to the vendor. “The approximately 23.62 million affected records include records for anonymous accounts with no registered email address or similar information. We are continuing to determine the actual number of individuals whose personal information was disclosed without authorization,” Helpfeel said . This metadata includes information that could allow threat actors to reconstruct and access URLs associated with images uploaded by users. A list of private images has also be
-
update from bleepingcomputer.com
Gyazo server flaw exploited to steal 23.6 million user records
bleepingcomputer.com · 25d ago · September 18th, 2026
Gyazo is a cloud-based screenshot and screen-recording tool operated by Helpfeel that automatically uploads user screen captures to the cloud and gives them a shareable link to share on chats, forums, social media, etc. It's especially popular in gaming communities and claims 23 million users worldwide , who have submitted 3.1 billion media items. The company has now taken the platform offline while it conducts maintenance. "Currently, the Gyazo service is temporarily suspended for maintenance as a preventive measure. We sincerely apologize for any inconvenience caused. Please wait a little longer until recovery," reads a post on X . The company detected the suspicious activity on September 12 and fixed a vulnerability the attackers used to breach the platform, but by then, the data had already been stolen.
-
update from www.bleepingcomputer.com
Gyazo server flaw exploited to steal 23.6 million user records https:// bleepingcomputer.com/news/security/ gyazo-server-flaw-exploited-to-s
www.bleepingcomputer.com · 25d ago · September 18th, 2026
Gyazo server flaw exploited to steal 23.6 million user records https:// bleepingcomputer.com/news/security/ gyazo-server-flaw-exploited-to-s
via X https://www.bleepingcomputer.com/news/security/gyazo-server-flaw-exploited-to-steal-236-million-user-records/
-
mentioned by cyberworldops.eu
Helpfeel confirmed RCE via a Gyazo image upload vulnerability on Sept 11, with access to a database of ~23.62M user records. Account data an
cyberworldops.eu · 25d ago · September 18th, 2026
-
mentioned by bleepingcomputer.com
Gyazo server flaw exploited to steal 23.6 million user records
bleepingcomputer.com · 25d ago · September 19th, 2026
-
mentioned by www.bleepingcomputer.com
🤖 Gyazo confirmed a data breach: attackers exploited a server vulnerability to steal 23.6 million user records from the screenshot-sharing p
www.bleepingcomputer.com · 24d ago · September 19th, 2026
-
mentioned by www.all-about-security.de
Gyazo data breach: 23.6 million user records stolen - attackers exploited upload server vulnerability in image sharing service
www.all-about-security.de · 24d ago · September 19th, 2026
-
update from thehackernews.com
Step three: receive this achievement automatically. There is no Step four. This is simply your life now. We recommend auditing what you ever
thehackernews.com · 24d ago · September 19th, 2026
Step three: receive this achievement automatically. There is no Step four. This is simply your life now. We recommend auditing what you ever
via Mastodon https://thehackernews.com/2026/09/gyazo-breach-exposes-2362-million-user.html
-
update from go.rodtrent.com
Security Check-in Quick Hits: AI Agent Breakouts, Gyazo’s 23.6M-Record Screenshot Breach, and Actively Exploited Workflow RCE # Security # C
go.rodtrent.com · 24d ago · September 19th, 2026
Security Check-in Quick Hits: AI Agent Breakouts, Gyazo’s 23.6M-Record Screenshot Breach, and Actively Exploited Workflow RCE # Security # C
via Mastodon https://go.rodtrent.com/go/f97chgx
-
mentioned by www.bleepingcomputer.com
# Gyazo server flaw exploited to steal 23.6 million user records https://www. bleepingcomputer.com/news/secu rity/gyazo-server-flaw-exploite
www.bleepingcomputer.com · 24d ago · September 19th, 2026
-
mentioned by www.securityweek.com
We're so sorry for the inconvenience and appreciate your patience while your information continues to be compromised in ways we cannot fully
www.securityweek.com · 23d ago · September 20th, 2026