Helpfeel

Profile narrative

Helpfeel is a company headquartered in Japan that operates the Gyazo image upload and sharing service. Gyazo enables users to upload images, store them in a cloud repository, and generate shareable links. The service provides a method for individuals and teams to distribute visual content. Helpfeel’s core product is Gyazo.

The scale of Helpfeel’s operations can be inferred from the data exposed in the September 2026 breach, which affected approximately 23.6 million user records. Those records contained names, email addresses, password hashes, user and device IDs, X integration tokens, profile details, usage statistics and billing information. In addition, the breach revealed that roughly 490 million image metadata records were accessed by the attackers. A further, undisclosed number of private images were also compromised, while payment card data was not part of the exposed information.

Helpfeel’s Gyazo platform retains detailed metadata for each uploaded image, including user and device identifiers, usage statistics and billing information. The presence of X integration tokens in the exposed data indicates that the service offers direct sharing options to the X platform. Additionally, the breach showed that Gyazo stores billing information, suggesting that some users interact with paid features or subscriptions. Notably, payment card data was not part of the compromised information, indicating that such details are either not stored or were protected.

The incident originated from a vulnerability in Gyazo’s image upload server, which attackers exploited to gain unauthorized access to Helpfeel’s systems. Intruders remained inside the environment for a period before being detected and removed shortly thereafter. Helpfeel disclosed the breach publicly, outlining the types of data that were accessed. The company’s response involved closing the security gap and expelling the malicious actors from its infrastructure.

Incidents

1 incident linked to this organisation.