conv.

← The whole story
Security
Helpfeel's Gyazo breach exposes 23.6M user records, 490M image metadata

Security researchers highlight metadata exposure as greater threat than credential breach

1 Sep 18 · 6d ago · 1 article · 2 posts · 2 sources · development 1 of 1

Expert analysis warns that the 490 million image metadata records—containing EXIF location data, OCR-extracted text, session IDs, and image URL data—pose greater risk than the 23 million user account credentials. Metadata could allow reconstructing user behavior, location history, and accessing developer screenshots containing API keys and credentials.

Security researchers highlight metadata exposure as greater threat than credential breach
SecurityWeek

“The 490 million metadata records are the more serious number. Gyazo is a screenshot tool. Developers use it constantly to share what is on their screen, which means those images contain terminal output, API keys, credentials in config files.”

Security researcher (analysis)

Helpfeel Gyazo operatorUnknown attacker Threat actor

The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump

Peak 2 pieces in two hours at Sep 18, 6 AM; 9 pieces over 6 days (1 article · 8 posts) Sep 18, 6 AM — 2 pieces · 1 article · 1 post — Mastodon 1, Newswires 1Sep 18, 8 AM — quietSep 18, 10 AM — 1 piece · 1 post — Mastodon 1Sep 18, 12 PM — quietSep 18, 2 PM — quietSep 18, 4 PM — 1 piece · 1 post — Mastodon 1Sep 18, 6 PM — quietSep 18, 8 PM — quietSep 18, 10 PM — quietSep 19, 12 AM — quietSep 19, 2 AM — quietSep 19, 4 AM — quietSep 19, 6 AM — quietSep 19, 8 AM — quietSep 19, 10 AM — quietSep 19, 12 PM — quietSep 19, 2 PM — quietSep 19, 4 PM — quietSep 19, 6 PM — quietSep 19, 8 PM — quietSep 19, 10 PM — quietSep 20, 12 AM — quietSep 20, 2 AM — quietSep 20, 4 AM — quietSep 20, 6 AM — quietSep 20, 8 AM — quietSep 20, 10 AM — quietSep 20, 12 PM — 1 piece · 1 post — Mastodon 1Sep 20, 2 PM — quietSep 20, 4 PM — quietSep 20, 6 PM — quietSep 20, 8 PM — 1 piece · 1 post — Mastodon 1Sep 20, 10 PM — quietSep 21, 12 AM — quietSep 21, 2 AM — quietSep 21, 4 AM — quietSep 21, 6 AM — quietSep 21, 8 AM — quietSep 21, 10 AM — 1 piece · 1 post — Mastodon 1Sep 21, 12 PM — quietSep 21, 2 PM — quietSep 21, 4 PM — quietSep 21, 6 PM — quietSep 21, 8 PM — quietSep 21, 10 PM — quietSep 22, 12 AM — quietSep 22, 2 AM — quietSep 22, 4 AM — quietSep 22, 6 AM — quietSep 22, 8 AM — quietSep 22, 10 AM — quietSep 22, 12 PM — quietSep 22, 2 PM — 1 piece · 1 post — Mastodon 1Sep 22, 4 PM — quietSep 22, 6 PM — quietSep 22, 8 PM — quietSep 22, 10 PM — quietYesterday, 12 AM — quietYesterday, 2 AM — quietYesterday, 4 AM — quietYesterday, 6 AM — quietYesterday, 8 AM — quietYesterday, 10 AM — quietYesterday, 12 PM — quietYesterday, 2 PM — quietYesterday, 4 PM — quietYesterday, 6 PM — quietYesterday, 8 PM — quietYesterday, 10 PM — 1 piece · 1 post — Mastodon 1Today, 12 AM — quietToday, 2 AM — quietToday, 4 AM — quietToday, 6 AM — quietToday, 8 AM — quiet 1
1Security researchers highlight metadata…
Sep 19Sep 20Sep 21Sep 22yesterdaynow · 9:45 AM ET

What was reported 1 claim about this development

  1. 1 outlet 23 Million User Records Compromised in Gyazo Data Breach

    first by SecurityWeek, 6d ago

What people said 6 voices · verbatim

All 1 developments of Helpfeel's Gyazo breach exposes 23.6M user records, 490M… →

MastodonNewswires