Gyazo server flaw exploited to steal 23.6 million user records

Gyazo, a cloud-based screenshot and screen-recording platform, suffered a data breach on September 11, 2026, when attackers exploited a server vulnerability to access its database and steal approximately 23.62 million user records. The compromised data includes personal information such as names, email addresses, password hashes, session IDs, and integration tokens, as well as metadata for 490 million images, some of which may have been private. Gyazo temporarily suspended the service to investigate and mitigate the breach, urging users to change their passwords and remain vigilant against potential phishing or follow-up attacks.

AI-extracted · verify before operational use