Breachesby GlyphGyazo
Disclosed Sep 16, 202623,620,000 affectedConfirmed
Gyazo server flaw exploited to steal 23.62 million user records
Screenshot service Gyazo, run by Helpfeel, said an attacker exploited a server vulnerability and stole 23.62 million user records, including emails, password hashes, session IDs and X tokens, plus 490 million image metadata records. The service was suspended for maintenance.
What is known
| People affected | 23,620,000 (as reported by the organization) |
|---|---|
| Disclosed | Sep 16, 2026 |
| Discovered | Sep 12, 2026 |
| Attack | Hacking |
| Data exposed | NamesEmailsPasswordsCredentials and tokensIP addressesLocationOther |
| Sector | Tech · JP |
| Status | Confirmed |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.