Gyazo server flaw exploited to steal 23.6 million user records

Key Takeaways

• A server flaw in the Gyazo screenshot-sharing service was exploited to steal 23.6 million user records, including email addresses and hashed passwords, in what appears to be one of the largest data breaches targeting a cloud-based media service.
• The attackers exploited a server-side vulnerability in Gyazo's API to extract the user database, though the company has since deployed patches and forced password resets for all affected accounts.