23 Million User Records Compromised in Gyazo Data Breach
Hacker exploited a Gyazo upload-server flaw, exposing 23.6 million user records and 490 million image metadata records.
Helpfeel disclosed that a hacker exploited a vulnerability in Gyazo's image upload server on September 11, executing malicious commands before being removed the next day. The attacker accessed a database with roughly 23.62 million user records, including names, email addresses, password hashes, user and device IDs, X integration tokens, profile data, usage statistics, and billing information. Additionally, about 490 million image metadata records were accessed, potentially allowing reconstruction of URLs to users' uploaded images, and a list of private images was also compromised. Payment card data was not affected.
- Hacker exploited a flaw in Gyazo's image upload server on September 11, executing commands
- 23.62 million records exposed: names, emails, password hashes, device IDs, X tokens
- 490 million image metadata records accessed, potentially exposing private image URLs
- Payment card information not compromised; affected individual count still being determined
From the original article
1 min read at securityweek.com
Gyazo maker Helpfeel said the attacker exploited a vulnerability in its image upload server to gain unauthorized access. The post 23 Million User Records Compromised in Gyazo Data Breach appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.