Skip to content
Canva Confirms Data Breach Linked to Third-Party Tool

Canva Confirms Data Breach Linked to Third-Party Tool

First seen 19 Oct 2026, 02:16 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 19, 2026 at 03:50 UTC
  • •Canva experienced a data breach through a third-party tool, Canny.
  • •The Seven Deadly Sins ransomware group claims to have accessed over two million records.
  • •Canva's core systems remain secure, and affected customers have been notified.

Canva has acknowledged a data breach affecting some enterprise customer records due to unauthorized access via Canny, a third-party tool used for product feedback. The Seven Deadly Sins ransomware group claimed responsibility, stating they accessed over two million Salesforce records, including enterprise license orders and billing PDFs. A sample document was published as proof of the breach, which the hackers allege has already been sold to a private buyer. Canva reported that its own systems were not compromised, and it has since revoked Canny's access and notified affected customers. The company has a history of data breaches, including significant incidents in 2019 and 2020. Canva is a major player in the tech industry, with over 265 million monthly active users and partnerships with notable companies like Netflix and YouTube.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-16
Seven Deadly Sins claims responsibility
The ransomware group posted on their darknet site, claiming to have breached Canva and accessed sensitive records.
Cyberdaily.Au
2026-10-19
Canva confirms data incident
Canva disclosed the breach, stating that unauthorized access occurred via the Canny tool affecting enterprise customer records.
Cyberdaily.Au

More articles in this cluster (2)

Following this threat?

Track Seven Deadly Sins and Salesforce in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 2

Common questions

What data was compromised?
The breach reportedly involved over two million Salesforce records, including enterprise license orders and billing documents.
Is Canva's platform secure?
Yes, Canva stated that its own systems were not compromised during the incident.
What actions should affected customers take?
Affected customers should monitor their accounts for unusual activity and follow any guidance provided by Canva.