Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

A security breach at Gyazo, Helpfeel's image-sharing service, exposed about 23.62 million user records, including email addresses and password hashes, the Kyoto-based company said in a notice published Wednesday. It also exposed about 490 million image metadata records, mostly for images from January 2019 or earlier, including the IDs that make up Gyazo image links. Helpfeel said

Reported facts: Gyazo, an image-sharing SaaS run by Helpfeel, disclosed a breach exposing approximately 23.62 million user records, including email addresses and password hashes, along with about 490 million image metadata records containing IDs that form Gyazo image links. These records largely relate to images from January 2019 or earlier. RealGround analysis: While the incident is primarily a traditional SaaS data breach, leaked image metadata and link IDs could indirectly affect AI workflows that consume Gyazo-hosted content, increasing risks of sensitive data exposure and downstream misuse. Organizations integrating such SaaS content into AI agents should harden access controls, review data ingestion policies, and ensure password and token hygiene to limit blast radius from similar third-party compromises.