Gyazo breach exposes 23.6 million user records

Gyazo, a platform for sharing and storing images, has confirmed a data breach resulting in the theft of 23.6 million user records. The incident occurred after attackers exploited an undisclosed server vulnerability, allowing unauthorized access to sensitive user data. The company stated that the breach included email addresses and hashed passwords but did not specify whether additional personal or payment information was compromised.

What happened

The breach was detected following unusual activity on Gyazo’s servers. An investigation revealed that attackers had exploited a flaw in the platform’s infrastructure to extract user records. Gyazo has since patched the vulnerability and initiated a forced password reset for all accounts. The company also notified affected users via email, advising them to monitor their accounts for suspicious activity. No details were provided about the timeline of the attack or when the vulnerability was introduced.

What we don’t know yet

Sources did not clarify whether the stolen data has been leaked or sold on underground forums. Gyazo has not disclosed the hashing algorithm used for passwords, leaving uncertainty about the potential risk of credential cracking. Additionally, the company did not specify if any regulatory authorities, such as data protection agencies, have been informed of the incident. Further updates may address these gaps as the investigation continues.