Bottom line: Unauthorized access to 23 million Gyazo user records is a significant threat to users' sensitive information.
What's happening: Helpfeel, the parent company of Gyazo, reported the breach after discovering unauthorized access to its image upload server. An attacker exploited a vulnerability in the server to gain access, compromising sensitive user data.
What to do: Security teams should review and update their incident response plans to ensure they can detect and respond to similar server-side vulnerabilities, and implement additional security measures to protect user data.