Canva confirms enterprise customer data exposed in third party incident
Australian software company Canva disclosed that enterprise customer records were exposed following a cyber security incident at a third-party data provider.
FTMQ Security, written by our newsroom0 views
Australian software multinational Canva has confirmed that enterprise customer records were exposed during a security incident involving a third-party data tool. Cyber Daily reported that the exposure occurred after a new ransomware group claimed to have breached the company and offered the stolen data online. [1]
According to Cyber Daily, the ransomware group named Seven Deadly Sins listed Canva on its darknet leak site on October 16. The group claimed to have accessed more than two million Salesforce records, enterprise license orders, and billing files. Seven Deadly Sins stated that the stolen Salesforce data was sold to an unidentified buyer. [1]
Canva was founded in 2013 in Perth by Melanie Perkins, Cliff Obrecht, and Cameron Adams to make design tools accessible to non-designers. By the end of 2025, the platform supported more than 265 million monthly active users across 190 countries. [3]
As FTMQ Security reported earlier, third-party vendor breaches continue to expose sensitive organizational information across industries. Cyber Daily reported that Canva confirmed the exposure was limited to customer records within the affected third-party tool. [1][4]
In short
- Canva confirmed enterprise customer records were exposed via a third-party data tool.
- The Seven Deadly Sins ransomware group listed Canva on its darknet leak site on October 16.
- Hackers claimed to access over two million Salesforce records, enterprise license orders, and billing PDFs.
- The ransomware group claimed the stolen Salesforce data was sold to a private buyer.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Exclusive: Aussie software giant Canva confirms third-party data incidentCyber Daily, 6h ago (the report this story comes from)
Background
- [2]List of unicorn startup companies on Wikipedia
- [3]Canva on Grokipedia
- [4]EY Data Breach Exposes Information of Goldman Sachs and Man Group Clients FTMQ Security, 10d ago
Our newsroom writes these reports with the help of software, from the 4 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- ASOS confirms data breach following social engineering attack on employee credentialsData Breaches, 10d ago
More in Data Breaches
- Ransomware groups increase physical and psychological threats against corporate executives8h ago
- Ransomware groups target staff families in forty percent of attacks8h ago
- OpenCode breach exposes developer API keys following distillation attack1d ago
- Healthcare Firm and IT Provider Pay Millions Over Breach1d ago
- Chinese hackers exploit critical BeyondTrust flaw for persistent network access2d ago
- Ransomware groups increase physical violence and psychological threats against employees2d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.