Gyazo is currently undergoing maintenance to ensure that you can use the service more safely. Access to the service has been temporarily suspended during this process.

Images and other data previously saved to Gyazo remain intact. We are currently preparing a way for you to review your saved data and make it available for viewing and sharing again.

We apologize for the inconvenience and concern. Please bear with us while we prepare to restore the service.

Helpfeel Inc. (Head Office: Kyoto, Japan; Representative Director and CEO: Isshu Rakusai; hereinafter “Helpfeel”) has confirmed that Gyazo, our image-sharing service, was subject to unauthorized access by a third party, resulting in the unauthorized disclosure of user information and certain metadata associated with uploaded images.

We have blocked all access routes used in the incident and have completed remediation of the vulnerability that was exploited. We continue to prioritize measures to prevent further harm while investigating the scope and impact of the incident.

We sincerely apologize to all Gyazo users and other affected parties for the significant concern and inconvenience caused by this incident.

Our investigation remains ongoing, and additional information may come to light. The following summarizes the information we have confirmed as of September 16, 2026. 

In this notice, the term “images” refers to all content captured and stored via Gyazo, including screenshots, GIFs, and videos.  Unless otherwise stated, all dates and times are in Japan Standard Time (JST).

1. Incident Overview

On September 11, 2026, a third party exploited a vulnerability in Gyazo’s image upload server to gain unauthorized access to our systems and execute arbitrary commands.

That evening, we detected suspicious activity and began investigating and responding to the incident. By the early hours of September 12, we had blocked the identified access routes and terminated unauthorized connections established by the third party.

Our subsequent investigation confirmed that the third party had accessed Gyazo’s database and that user information and metadata associated with uploaded images had been disclosed without authorization.

2. Scope and Impact of the Unauthorized Access

Our investigation remains ongoing, and additional information may come to light. The facts confirmed as of September 16, 2026, are as follows.

(1) User Information: Approximately 23.62 Million Records

We have confirmed that approximately 23.62 million records containing data related to Gyazo users were disclosed without authorization.

The data includes:

• Name (any text entered by the user, such as a name or nickname)
• Email address
• Password hash
• User ID
• Device ID
• Login session ID
• X (formerly Twitter) integration token (if connected)
• Email address associated with Google SSO (if connected)
• Profile information
• Language preference
• Registration date and time
• Last login date and time
• Subscription plan
• Billing status (does not include credit card numbers or other payment method information)
• Usage statistics

The types and extent of data involved vary by user. We are continuing to investigate the details of the affected data and the potential for further harm. We have carefully reviewed the technical characteristics of the authentication-related information involved in the breach and its potential for misuse, and have already implemented the necessary measures, including invalidation and restrictions.

The approximately 23.62 million affected records include records for anonymous accounts with no registered email address or similar information. We are continuing to determine the actual number of individuals whose personal information was disclosed without authorization.

We have confirmed that no payment information, including credit card numbers, was disclosed without authorization.

(2) Image Metadata: Approximately 490 Million Records

We have confirmed that approximately 490 million metadata records associated primarily with images registered in or before January 2019 (approximately 14.4% of all image-related data) were disclosed without authorization. In addition, metadata relating to approximately 2.4 million images was separately retrieved using specific filtering criteria and was also disclosed without authorization.

The metadata involved in the breach includes:

• Image ID (information used to construct the image URL)
• Source IP address used for the upload
• User-Agent
• EXIF location data (if contained in the image)
• OCR text extracted from the image
• Image title
• Source URL and other metadata
• Hashed passphrase for private images
• Other related information

The affected metadata includes information used to construct Gyazo image URLs. This information could be used by a third party to access and view the corresponding images without authorization. We have temporarily disabled viewing of some images to prevent further harm.

We have also confirmed that the third party obtained a list identifying private images. As we cannot rule out the possibility that some private images may have been viewed by the third party, we are continuing our detailed investigation.

Our investigation to date has not confirmed any loss of image data resulting from the unauthorized access.

(3) Impact on Other Helpfeel Services

Helpfeel and Cosense, which are also provided by Helpfeel Inc., have system architectures that differ from Gyazo’s. Based on our investigation to date, we have not confirmed any unauthorized disclosure of information from the Helpfeel or Cosense systems as a result of this incident.

However, some images displayed within Helpfeel and Cosense using Gyazo may currently be unavailable due to the suspension of Gyazo image delivery in response to this incident.

3. Response to Gyazo Users

(1) Notification to Users

We plan to send notifications regarding this incident to the registered email addresses of Gyazo users who may have been affected. We are currently working to identify users whose information was disclosed without authorization and will determine which users to notify based on the progress of our investigation.

For users we are unable to reach by email, such as those with anonymous accounts without a registered email address or similar contact information, we plan to provide notifications through the Gyazo web interface.

We are continuing to investigate the details of the affected information. If we identify any additional information that should be shared, we will promptly publish an update.

(2) Actions We Ask Users to Take to Prevent Further Harm

To help prevent further harm resulting from this incident, we ask all Gyazo users to change their passwords.

If you use the same or a similar password for Gyazo and any other services, we ask that you also change your passwords for those services.

Please also remain vigilant for any suspicious emails, messages, or other communications related to this incident.

(3) Contact Information

For inquiries regarding this incident, please contact us through the appropriate form below.

Japanese:
https://help-ja.gyazo.com/contact-us

English:
https://help.gyazo.com/contact-us

4. Timeline and Response

5. Next Steps

(1) We will continue to prioritize measures to prevent further harm while investigating the scope and impact of the data breach through a forensic investigation conducted by external specialists. If our ongoing investigation identifies any additional information that should be shared, we will promptly publish an update.

(2) We are continuing to assess applicable reporting requirements and to prepare and submit the necessary reports to, and consult with, relevant data protection and regulatory authorities in Japan and other applicable jurisdictions. We are also preparing notifications for Gyazo users. We will determine which users to contact based on the progress of our investigation and will notify them on a rolling basis.

(3) To fully investigate this incident and prevent a recurrence, we will strengthen our security measures, including reviewing our authentication, authorization, and access controls; enhancing our monitoring and audit processes; and improving our secure design, development, and review practices. We will also review our other services for similar vulnerabilities.

We take this incident very seriously and are fully committed to preventing a recurrence and restoring the trust of our users and other stakeholders.

Newly uploaded images are now available as usual. Some images remain unavailable due to emergency maintenance. We sincerely apologize for the inconvenience.

We have currently suspended the image delivery servers for some images due to emergency maintenance. Errors will appear for the affected images. We sincerely apologize for the inconvenience.

Gyazo for Mac now supports Quick Mode and Studio Mode for both screenshots and video, so you can choose the right way to capture for the task at hand.

Quick Mode is there when speed matters. Select an area and capture immediately, making it ideal for quickly saving something you noticed, sharing an issue with a teammate, or recording a short interaction before it disappears.

Studio Mode is for captures you want to present clearly. Before taking a screenshot or starting a recording, you can adjust the position and size of the selected area. That means less unnecessary content around the edges, less cropping afterward, and a result that is easier for others to understand at a glance.

For screenshots, Studio Mode is also useful when creating a series of images. You can keep the capture area fixed while interacting with the app behind it and take multiple captures with consistent framing.

• Capture immediately with Quick Mode when speed is the priority.
• Refine the frame with Studio Mode when clarity and presentation matter.
• Set separate defaults for screenshots and video to match your usual workflow.
• Open the other mode from the three-dot menu whenever you need to switch temporarily.

This is especially helpful when creating product documentation, bug reports, tutorials, onboarding materials, presentations, and demos. Instead of fixing the framing after every capture, you can make the image or video easier to use from the moment you capture it.

Spend less time adjusting captures afterward—and more time putting them to work.

This improvement is available to all Gyazo for Mac users.

Download the latest version

Gyazo is now available as an app in Canva. Search for Gyazo from Canva Apps and add it to your workspace.

Sign in to Gyazo in the same browser and connect your account to access your Gyazo gallery directly from the Canva editor.

• Find and add Gyazo from Canva Apps
• Browse your existing Gyazo captures without leaving the Canva editor
• Place captures directly into your designs without downloading and re-uploading files

This integration makes it easier to turn captures you have already saved in Gyazo into presentations, social content, documents, and other designs while staying in your Canva workflow.

Open Canva

Gyazo Pro users can now set the maximum video recording time directly from the Gyazo for Mac settings.

Choose the duration that best fits what you’re capturing:

• 7 sec
• 30 sec
• 1 min
• 3 min
• 5 min
• 10 min

Whether you’re making a quick visual note or recording a longer workflow, you can set an appropriate limit before you start recording.

This setting is available to Gyazo Pro users on Mac. Free users continue to record videos with the standard 7-second limit.

Download the Latest Version

We’ve improved Collections on Gyazo Web to make it easier to organize, find, and revisit your captures.

You can now:

• Open all your Collections from the sidebar with the new dedicated Collections page.
• Sort Collections by updated date or name, with your selected sort order remembered for your next visit.
• Pin frequently used Collections to keep them accessible in the sidebar.
• Continue where you left off when returning to the Collections page, with your previous scroll position restored.
• Browse smoothly as more Collections load automatically while you scroll.
• See up to four capture thumbnails for each Collection, making its contents easier to recognize at a glance.

The sidebar now focuses on pinned Collections, while the dedicated Collections page gives you a convenient place to browse the Collections you’ve organized.

These improvements make it simpler to return to past captures and put them to use again.

Open Collections

Viewing long screenshots and other tall images on Gyazo is now smoother and easier.

When you click a large image on its individual page, Gyazo first displays it at a size that fits within your viewport. New zoom controls then appear at the bottom of the screen, allowing you to:

• Zoom in or out in 10% steps
• Check the current zoom percentage
• Quickly switch to 100% view
• Keep the full capture in context while inspecting smaller details

Previously, clicking a tall image could enlarge it beyond the visible area, making it difficult to understand the entire capture. The updated behavior provides a more controlled way to review long pages, documents, and other vertically oriented captures.

The controls are available for images on the Gyazo web app when viewed on desktop.

Open Your Captures

We’ve updated the Gyazo Chrome Extension with a new dropdown menu on capture completion notifications to make your post-capture workflow even more efficient.

What’s New:
Click the "..." menu icon at the top left of the capture notification popup to quickly access key actions without switching tabs:

• Copy URL
• Copy Image
• Copy HTML Code
• Copy Markdown Code

Why you'll love it:

• Seamless Sharing: Instantly copy links or code snippets right after capturing.
• Stay in Your Flow: Complete actions in one click without interrupting your browsing session.
• Flexible Options: Easily choose the exact format you need for your destination tool.

This improvement is available to all Gyazo Chrome Extension users. Update to the latest version and try it today!

Download the Gyazo Extension