Japanese software company Helpfeel is notifying users of its Gyazo image-sharing service that hackers have accessed their information.
Gyazo is a widely used cross-platform tool that lets users capture screenshots, GIFs, or short screen recordings and instantly generate shareable links.
Helpfeel revealed this week that it recently detected unauthorized access to Gyazo servers. A hacker exploited a vulnerability in its image upload server on September 11, enabling them to execute malicious commands.
The attacker was kicked out the next day, but not before accessing a database storing roughly 23.6 million user records.
The compromised Gyazo user information includes names, email addresses, password hashes, user and device IDs, X integration tokens, profile information, usage statistics, and billing information.
Payment card information was not compromised, according to the vendor.