Canva
Data Breach on October 16, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | canva.com | ||
| Claimed By | TheSevenDeadlySins | ||
| Date Discovered | Oct 16, 2026 | ||
| Description | Canva is a graphic design and visual communication company based in Australia, providing an online design platform with drag-and-drop tools and customizable templates. | ||
| Leak Size | Unknown |
Credential Exposure for canva.com
We've indexed 16,208 @canva.com accounts from external breaches, plus 798,390 credentials for canva.com itself.
Last checked Oct 16, 2026
| @canva.com addresses from external breaches | |
|---|---|
| Third-party breaches | 15,818 accounts · across 43 breaches · 15,809 with a plaintext password · most recent Dec 18, 2025 |
| Combo lists | 553 accounts · most recent Oct 16, 2026 |
| Phishing pages | 22 accounts · most recent Aug 13, 2026 |
| Passwords for canva.com accounts | |
|---|---|
| Combo lists | 461,486 logins · most recent Oct 16, 2026 |
| Infostealer logs | 366,905 logins · 275,687 infected devices · most recent Oct 16, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Canva was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.