Canva Data Breach

What happened

In May 2019, the graphic design tool website Canva suffered a data breach that impacted 137 million subscribers. The exposed data included email addresses, usernames, names, cities of residence and passwords stored as bcrypt hashes for users not using social logins.

Exposed data

Recommended actions

• Change your Canva password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Canva — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.