Web Design » Canva » How Did the Canva Data Breach Happen?

How Did the Canva Data Breach Happen?

Last updated on September 27, 2022 @ 10:21 pm

Canva, an online design platform with more than 10 million users, has suffered a data breach that has led to the personal details of around 139 million people being compromised. The data that has been accessed includes names, email addresses, usernames, and passwords. Canva has said that no financial information or credit card details were accessed in the breach.

Canva has become aware that on May 24, 2019, there was unauthorized access to some of our systems. We immediately commenced a full investigation and engaged leading cyber security firms to assist us.

We are treating this matter extremely seriously and have taken steps to bolster the security of our systems and user information. We have also contacted law enforcement authorities.

At this stage, we believe that the unauthorized access was limited to one individual. We have taken steps to contain the incident and are continuing to investigate its scope.

PRO TIP: According to an article from The Guardian, the Canva data breach happened when a hacker gained access to the company’s internal systems and stole employee login details. This allowed the hacker to access customer data, including names, email addresses, and passwords. Canva has since reset all affected user passwords and is working with law enforcement to investigate the incident.

We understand the seriousness of this issue and are taking appropriate measures to notify all affected users. We will also be resetting passwords for all Canva accounts as a precautionary measure.

We are committed to maintaining the highest standards of security and will continue to take all necessary steps to protect our users’ information.

How Did the Canva Data Breach Happen?

It is not yet clear how the Canva data breach happened, but the company has said that it is investigating the matter and has engaged leading cyber security firms to assist in the investigation. Canva has also reset passwords for all accounts as a precautionary measure.

Drew Clemente

Drew Clemente

Devops & Sysadmin engineer. I basically build infrastructure online.