Gyazo confirms data breach affecting 23.6 million users

The popular application Gyazo has confirmed a major data breach affecting approximately 23.6 million users. Hackers successfully bypassed server security on September 11, gaining access to a vast database of customer information.

Stolen data includes usernames, email addresses, encrypted passwords, login sessions, user and device identification numbers, X platform integration tokens, Google SSO email addresses, profile details, payment statuses, and subscription information. Additionally, attackers accessed metadata for 490 million videos and graphics, primarily those uploaded before January 2019, which may include private materials.

In response to the unauthorized access, Gyazo temporarily suspended its services to perform maintenance and patch the vulnerability used in the attack. The company stated that the security flaw has been addressed to prevent future incidents.