Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
-
A security breach at Gyazo, the image-sharing service operated by Kyoto-based Helpfeel, has exposed approximately 23.62 million user records, including email addresses and password hashes. The company disclosed the incident in a notice published on Wednesday.
The breach also exposed roughly 490 million image metadata records. According to Helpfeel, these records mostly relate to images uploaded in January 2019 or earlier, and include the IDs that form Gyazo image links.
Affected data at a glance:
- About 23.62 million user records, containing email addresses and password hashes
- About 490 million image metadata records, primarily for images from January 2019 or earlier
- Image link identifiers (the IDs that make up Gyazo image links)
Helpfeel has not, in the information available, published a specific CVE identifier or advisory ID for this incident, so none is cited here. Users of the platform should treat credentials reused on other services as potentially compromised and rotate those passwords, particularly where the same email address and password combination was used elsewhere.
Source: The Hacker News
Have you checked whether your organization has accounts or embedded Gyazo links tied to the affected data, and if so, how are you handling credential rotation?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login