Gyazo Breach Exposes 23.6 Million Users and Image Links

A breach at Gyazo, Helpfeel’s image-sharing service, exposed about 23.62 million user records, according to a company notice published on 16 September 2026. The affected data included email addresses and password hashes.

The incident also exposed about 490 million image metadata records, most relating to images uploaded in January 2019 or earlier. The metadata included the IDs used in Gyazo image links. Helpfeel said these IDs could potentially be used to view images without permission and has temporarily disabled viewing of some affected images.

Helpfeel asked all Gyazo users to change their passwords and to update passwords on any other services where the same or a similar password was used. The supplied report does not state whether the exposed credentials have been misused or confirm unauthorised access to individual images.