Millions of Records Leaked in Gyazo Image Service Breach

Helpfeel, a Japanese customer support and knowledge base company, experienced a major cyberattack on September 11, compromising its image-sharing service, Gyazo. Threat actors exploited a vulnerability to access servers and upload malware, resulting in the exposure of 23.62 million records. The compromised data includes personally identifiable information such as names, email addresses, and password hashes.

Additionally, approximately 490 million image metadata records were accessed, potentially including PII and image titles. While Helpfeel confirmed that no payment information was compromised, the possibility of attackers viewing private images cannot be ruled out. Consequently, the company has temporarily disabled viewing for some images as investigations continue.