Gyazo Announces Service Suspension After Exposure of 23.62 Million User Records

Exposure of user records and image metadata

BleepingComputer reported that Gyazo said attackers exploited a server vulnerability on September 11, 2026, accessed its database, and obtained approximately 23.62 million user records. Gyazo said it detected suspicious activity the following day and fixed the vulnerability. The company also stated that 490 million image-metadata records were exposed and that it cannot rule out some private images being viewed. The reported exposed information varies by user and may include X integration tokens, Google single sign-on email addresses, and subscription information.

Before the reported incident, Gyazo operated as a cloud-based screenshot and screen-recording service that automatically uploaded captures and generated shareable links.

Gyazo has reportedly taken its platform offline for maintenance, disabled access to files tied to exposed records, and begun notifying affected users after the reported database access.

The reported change combines a large number of user records with image metadata that Gyazo says can include image IDs, upload IP addresses, EXIF location data, OCR-extracted text, and hashed passphrases for private images. Gyazo says image IDs may be used to access corresponding content, prompting the temporary restriction on affected files.