Gyazo
Disclosed Sep 16, 20269 days ago23,620,000 affectedConfirmed
Gyazo server flaw exploited to steal 23.62 million user records
Screenshot service Gyazo, run by Helpfeel, said an attacker exploited a server vulnerability and stole 23.62 million user records, including emails, password hashes, session IDs and X tokens, plus 490 million image metadata records. The service was suspended for maintenance.
What is known
| People affected | 23,620,000 (as reported by the organization) |
|---|---|
| Disclosed | Sep 16, 2026 |
| Discovered | Sep 12, 2026 |
| Attack | Hacking |
| Data exposed | Names, Emails, Passwords, Credentials and tokens, IP addresses, Location, Other |
| Sector | Tech · JP |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Helpfeel news releasecorp.helpfeel.com · Official notice | Official notice |
| Gyazo server flaw exploited to steal 23.6 million user recordsbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Sep 16 | 23,620,000 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.