Skip to main content

CanvaCanva data breach exposed 139 million user records

In May 2019, Canva suffered a major data breach affecting approximately 139 million users worldwide. Unauthorized access exposed usernames, email addresses, and bcrypt-hashed passwords. Cybersecurity experts criticized the company for burying the breach notification beneath marketing announcements about recent acquisitions.

Scoring Impact

TopicDirectionRelevanceContribution
Corporate Transparency-againstsecondary-0.50
User Privacy-againstprimary-1.00
Overall incident score =-0.429

Score = avg(topic contributions) × significance (critical ×2) × confidence (0.57)× agency (negligent ×0.5)

Evidence (1 signal)

Confirms Policy Change May 25, 2019 documented

Canva confirmed 139 million users affected in May 2019 data breach

Canva disclosed that a data breach on May 25, 2019 affected approximately 139 million users worldwide, exposing usernames, email addresses, and bcrypt-hashed passwords. Cybersecurity publication CISO Magazine reported the company was criticized for burying the breach notification beneath marketing announcements.

Related: Same Topics