Gyazo Data Breach Exposes 23.6 Million User Records in Japan
On September 17, 2026, Helpfeel, the Japanese operator of the screenshot and video-capture service Gyazo, confirmed a data breach resulting in the exposure of approximately 23.6 million user records. The unauthorized access was disclosed in an official statement, with the company reporting the incident to Japan’s Personal Information Protection Commission.
The compromised data included email addresses, password hashes, device IDs, and login session IDs, though no financial information such as credit card numbers was affected. Helpfeel stated that its investigation remains ongoing and that measures are being implemented to prevent future breaches.
The breach highlights growing cybersecurity risks for cloud-based sharing services, particularly in regions with strict data protection regulations. Further details on the incident’s scope and potential impact are expected as the investigation progresses.
Gyazo TPRM report: https://www.rankiteo.com/company/helpfeel-inc
Helpfeel TPRM report: https://www.rankiteo.com/company/helpfeel-inc
"id": "hel1789611963",
"linkid": "helpfeel-inc",
"type": "Breach",
"date": "9/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '23.6 million',
'industry': 'Technology (Screenshot and video-capture '
'service)',
'location': 'Japan',
'name': 'Gyazo (Helpfeel)',
'type': 'Company'}],
'data_breach': {'number_of_records_exposed': '23.6 million',
'personally_identifiable_information': 'Email addresses, '
'device IDs, login '
'session IDs',
'sensitivity_of_data': 'Email addresses, password hashes, '
'device IDs, login session IDs',
'type_of_data_compromised': 'User records'},
'date_publicly_disclosed': '2026-09-17',
'description': 'On September 17, 2026, Helpfeel, the Japanese operator of the '
'screenshot and video-capture service Gyazo, confirmed a data '
'breach resulting in the exposure of approximately 23.6 '
'million user records. The unauthorized access was disclosed '
'in an official statement, with the company reporting the '
'incident to Japan’s Personal Information Protection '
'Commission. The compromised data included email addresses, '
'password hashes, device IDs, and login session IDs, though no '
'financial information such as credit card numbers was '
'affected. Helpfeel stated that its investigation remains '
'ongoing and that measures are being implemented to prevent '
'future breaches.',
'impact': {'brand_reputation_impact': 'Growing cybersecurity risks for '
'cloud-based sharing services',
'data_compromised': 'Email addresses, password hashes, device IDs, '
'login session IDs',
'payment_information_risk': 'No financial information such as '
'credit card numbers was affected'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Highlights growing cybersecurity risks for cloud-based '
'sharing services, particularly in regions with strict '
'data protection regulations',
'references': [{'source': 'Official statement from Helpfeel'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to Japan’s '
'Personal Information '
'Protection Commission'},
'response': {'communication_strategy': 'Official statement disclosed to '
'Japan’s Personal Information '
'Protection Commission',
'remediation_measures': 'Measures are being implemented to '
'prevent future breaches'},
'title': 'Gyazo Data Breach Exposes 23.6 Million User Records in Japan',
'type': 'Data Breach'}