23.6 million Gyazo users had their data breached
Assessment
The 23.62 million figure is a count of records disclosed, not of confirmed individuals. Helpfeel's own breach notice states that these records 'include records for anonymous accounts with no registered email address or similar information' and that the company is 'continuing to determine the actual number of individuals whose personal information was disclosed.' So the number of actual affected people is undetermined and is likely lower than 23.62 million. Coverage and headlines that render the figure as '23.6 million users' conflate a record count — which includes anonymous and potentially duplicate accounts — with a distinct, still-unresolved count of individuals. The breach is large and real; the specific claim that 23.6 million people were affected is not what the operator has confirmed.
Where this claim appeared
General press framing (e.g. tech-insider.org) · 2026-09-18
https://tech-insider.org/gyazo-data-breach-23-6-million-users-2026/What “Assessed, Not Confirmed” means
A named source states this as its own assessment, at its own stated confidence, rather than as established fact. Attribution to a nation state usually sits here. The assessment is real and reportable; treating it as settled is the error.
4 of 5 · rating scale
Assessed in
Gyazo breach: 23.6M user records and 490M image-metadata records — and why the metadata is the sharper harmThink this assessment is wrong? Report an error.