Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
Summary
Gyazo, an image-sharing service operated by Helpfeel, has suffered a significant data breach. The incident resulted in the exposure of approximately 23.62 million user records, containing email addresses and password hashes. Additionally, around 490 million image metadata records, primarily from images taken before January 2019, were also compromised.
IFF Assessment
This incident involves a large-scale data breach exposing user credentials and image metadata, which is detrimental to user privacy and security.
Defender Context
This breach highlights the ongoing risk of credential stuffing and account takeover if password hashes are weak or if users reuse passwords. Defenders should monitor for leaked credentials and advise users on password hygiene and multi-factor authentication adoption.