{"id":"gyazo-account-image-data-breach-sep-2026","category":"breach","status":"live","title":"Gyazo breach exposes 23.62 million account records; 432 image files confirmed accessed","tldr":"Gyazo’s breach affected account records and image metadata, including location data and extracted text. Some images were accessed. Change your Gyazo password and similar passwords elsewhere; review older images before restoring sharing.","summary":"An attacker breached Gyazo’s upload server on 11 September, exposing account information and image metadata. Helpfeel reported approximately 23.62 million account records, including anonymous accounts; this is not a count of distinct people. Depending on the account, information included email addresses, password hashes and login session identifiers. Image metadata included location information, extracted text and identifiers that could enable image viewing. The reported scope includes approximately 490 million metadata records, a separately filtered 2.4 million records and 174 million records for deleted images. The final investigation could not verify the exact fields or record counts transmitted outside Gyazo. Helpfeel confirmed that 432 image files belonging to 133 users were viewed or obtained and notified those users. The server flaw was fixed on 12 September and service resumed on 27 September. As of 20 October, Helpfeel had confirmed no subsequent misuse or financial harm. Notifications, monitoring and security improvements continued.","action":"If you have not changed your Gyazo password since the breach, change it now, along with any identical or similar passwords elsewhere. Review older images and their visibility settings before selecting “Resume delivery”. Be wary of breach-related messages: Helpfeel says its notification emails will not ask you to follow links or act on linked websites.","product":"Gyazo screenshot, video and image-sharing service","audience":"both","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["gyazo","helpfeel","data-breach","privacy","account-data","image-sharing"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Notice Regarding Unauthorized Access to Gyazo: Investigation Results (Update 3)","url":"https://corp.helpfeel.com/en/news/news-20261021-2","by":"Helpfeel","date":"2026-10-21"},{"kind":"advisory","title":"Notice and Apology Regarding a Data Breach Resulting from Unauthorized Access to Gyazo","url":"https://corp.helpfeel.com/en/news/news-20260916","by":"Helpfeel","date":"2026-09-16"},{"kind":"advisory","title":"Notice and Apology Regarding a Data Breach Resulting from Unauthorized Access to Gyazo (Update 2)","url":"https://corp.helpfeel.com/en/news/news-20260925","by":"Helpfeel","date":"2026-09-25"},{"kind":"advisory","title":"Notice Regarding the Resumption of Gyazo Services","url":"https://corp.helpfeel.com/en/news/news-20260927-02","by":"Helpfeel","date":"2026-09-26"},{"kind":"news","title":"Gyazo data breach leaves over 23 million user records exposed, includes half a billion metadata points","url":"https://cybernews.com/security/helpfeel-gyazo-data-breach-exposed-millions-records/","by":"Cybernews","date":"2026-09-21"},{"kind":"news","title":"23 Million User Records Compromised in Gyazo Data Breach","url":"https://www.securityweek.com/23-million-user-records-compromised-in-gyazo-data-breach/","by":"SecurityWeek","date":"2026-09-18"}],"started":"2026-09-11","closed":null,"created":"2026-11-03T20:59:13.794Z","updated":"2026-11-03T20:59:13.794Z","cve_notes":[],"timeline":[{"at":"2026-10-21","added":"2026-11-03T20:51:54.186Z","kind":"vendor-revised","text":"Helpfeel’s final report confirmed that 432 image files belonging to 133 users were viewed or obtained; those users had been individually notified. It also announced plans to notify approximately 57,000 contactable accounts potentially affected by the deleted-image metadata exposure.","url":"https://corp.helpfeel.com/en/news/news-20261021-2","by":"Helpfeel","patch":null},{"at":"2026-09-27","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Gyazo resumed service after security checks and additional safeguards. Older uploads were restricted to their owners, who could review each image before choosing “Resume delivery”.","url":"https://corp.helpfeel.com/en/news/news-20260927-02","by":"Helpfeel","patch":null},{"at":"2026-09-25","added":"2026-11-03T20:51:54.186Z","kind":"vendor-revised","text":"Helpfeel added approximately 174 million metadata records for previously deleted images to the affected data. It clarified that the 23.62 million user records included approximately 18.01 million anonymous accounts and 5.62 million accounts with registered email addresses.","url":"https://corp.helpfeel.com/en/news/news-20260925","by":"Helpfeel","patch":null},{"at":"2026-09-20","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Helpfeel began emailing potentially affected registered users in stages. It also placed notices within Gyazo.","url":"https://corp.helpfeel.com/en/news/news-20261021-2","by":"Helpfeel","patch":null},{"at":"2026-09-18","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Helpfeel suspended Gyazo to prevent further harm and commissioned an external forensic investigation.","url":"https://corp.helpfeel.com/en/news/news-20261021-2","by":"Helpfeel","patch":null},{"at":"2026-09-16","added":"2026-11-03T20:51:54.186Z","kind":"disclosed","text":"Helpfeel disclosed approximately 23.62 million affected user records, 490 million image-metadata records and a separately retrieved set covering 2.4 million images. It warned that the metadata could allow unauthorised image viewing.","url":"https://corp.helpfeel.com/en/news/news-20260916","by":"Helpfeel","patch":null},{"at":"2026-09-12","added":"2026-11-03T20:51:54.186Z","kind":"new-fix","text":"Helpfeel blocked the identified intrusion routes, disconnected the attacker and fixed the exploited server vulnerability.","url":"https://corp.helpfeel.com/en/news/news-20260916","by":"Helpfeel","patch":null},{"at":"2026-09-11","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"An attacker exploited Gyazo’s image-upload server and accessed its database. Helpfeel detected suspicious activity that evening.","url":"https://corp.helpfeel.com/en/news/news-20260916","by":"Helpfeel","patch":"na"}],"url":"https://hard.fyi/live/gyazo-account-image-data-breach-sep-2026/","json":"https://hard.fyi/api/live?id=gyazo-account-image-data-breach-sep-2026"}