Our takeGyazo confirmed attackers reached its image-upload server and walked off with 23.62 M user records plus metadata on 490 M images. No passwords or payment data were taken, but the records and image links are now public. Change any reused credentials.Cyber Resilience desk
Sources (5)
- the420_in · the420_in
- the420_in · the420_in
- the420_in · the420_in
- securityweek · securityweek
- infosec_mag · infosec_mag
What this means for you — Security leader:Confirm whether your organization uses Gyazo for screenshots or image sharing; rotate any credentials that may have been stored there and review image metadata policies.
What this means for you — Lean IT orgs:If your team uses Gyazo, change any passwords tied to it and assume old screenshots and their metadata could be public.
What this means for you — MSP:Check which clients have Gyazo accounts or integrations, advise them to rotate credentials, and treat any stored image metadata as potentially exposed.
What this means for you — Researcher:Review the exposed metadata for patterns in upload-server behavior or credential handling that may point to the root vulnerability.