Pixlr

Pixlr operates as an online photo editing service that provides web‑based tools for creating and modifying images. The service is offered under the names Pixlr Editor and Pixlr Express, catering to users who need varying levels of functionality from basic adjustments to more advanced edits. By delivering its tools through a browser, Pixlr enables access without requiring software installation. The platform is designed for users who require online image‑editing capabilities.

A distinguishing attribute of Pixlr is its focus on delivering photo‑editing functionality entirely through cloud‑based web applications. The platform provides two distinct interfaces—Pixlr Editor for more advanced editing tasks and Pixlr Express for quick, streamlined adjustments. The brand is also recognized under the alias Autodesk Pixlr, indicating a connection to the larger Autodesk family of products. This positioning highlights Pixlr’s emphasis on accessibility and ease of use within the digital creative tools market.

Pixlr is headquartered in the United States of America. The service operates as a subsidiary of a parent company that also oversees other related businesses. This structural relationship was referenced in the description of the 2020 security incident, which noted the breach happened during an intrusion aimed at another subsidiary under the same corporate umbrella. As a result, Pixlr shares certain corporate governance and infrastructure elements with its sibling entities.

On December 31, 2020, a threat actor identified as ShinyHunters leaked approximately 1.9 million user records from Pixlr’s online photo editing service. The compromised data included email addresses, login credentials stored with SHA‑512 hashing, country information, newsletter subscription status, and internal account details. The breach was traced to an intrusion that targeted a different subsidiary within the same corporate umbrella, allowing the attacker to access Pixlr’s Amazon Web Services bucket. ShinyHunters made the database freely available on a hacker forum, facilitating potential credential‑stuffing and phishing attacks. Security researchers subsequently verified the authenticity of portions of the leaked dataset, confirming that legitimate user information had been exposed.