# Massive Data Breach Exposes 23 Million Gyazo User Records

*Published September 21, 2026*
*Source: [https://www.securityweek.com/23-million-user-records-compromised-in-gyazo-data-breach/](https://www.securityweek.com/23-million-user-records-compromised-in-gyazo-data-breach/)*

## Executive Summary

*This is a Premium edition. The Executive Summary is available to sec-news.ai members —*
*[read it here](https://www.sec-news.ai/news/massive-data-breach-exposes-23-million-gyazo-user-records) or [see plans](https://www.sec-news.ai/pricing).*

## Article

Helpfeel, the Japanese company behind the popular Gyazo image-sharing service, has recently faced a major security breach affecting millions of users. On September 11, attackers exploited a vulnerability in the Gyazo image upload server, allowing them to execute unauthorized commands and access sensitive user data. The breach, detected shortly after, led to the exposure of approximately 23.6 million user records before the attacker was removed from the system the following day.

The compromised data includes names, email addresses, password hashes, user and device IDs, integration tokens, as well as profile and billing information. Helpfully, payment card information was not affected. The company has disclosed that even anonymous accounts, which did not have registered email addresses, are part of the compromised records. Helpfeel is actively working to assess the full extent of the personal information disclosure.

In addition to user records, the breach also exposed around 490 million image metadata records. Such metadata can provide threat actors with information necessary to reconstruct URLs linked to user-uploaded images. Although a list of private images was also compromised, Helpfeel has not disclosed the exact number of affected images.

This incident highlights the need for robust security measures and timely vulnerability management to protect user data from unauthorized access. Users are advised to remain vigilant and update their account credentials as a precautionary measure.