Gyazo breach: 23.6 million user records stolen

Helpfeel confirmed a data breach at its screenshot-sharing platform Gyazo after an attacker exploited an image upload server flaw on September 11. About 23.62 million user records and metadata tied to roughly 490 million images were exposed.

• Stolen records include names, emails, password hashes, X tokens and Google SSO addresses
• Metadata for ~490 million images affected, mostly uploaded on or before January 2019
• Attacker obtained a list of private images; no payment data was disclosed
• Helpfeel notified Japan's privacy regulator on September 15 and urges all users to change passwords