🔒breach.co.nz · the NZ & Australia breach register 🛡️ A Govern service
Register › 🇦🇺 AU › Technology
Technology sector · leaderboard
Own the Technology leaderboard
The top banner across the Technology overview and every Technology record — one advertiser, exclusively.
Own this leaderboard → breach@govern.co.nz

Canva

🇦🇺 Sydney, NSW · Canva Pty Ltd · Record AU-2019-0141
○ Reported — awaiting official confirmation
Reported — awaiting official confirmation. The facts below are drawn from the organisation's own disclosure and credible reporting. Figures are as reported; unknowns are labelled, not estimated by us.
People affected
137,000,000 (approx)
Breach date
2019-05
Regulator
none
Trust tier
B · Reported

Data exposed

Usernames, names, email addresses and hashed passwords Media-reported

Confidence: Confirmed = regulator/court · Company-confirmed = the organisation's own disclosure · Media-reported = press. Figures without an official source are labelled, not estimated.

What happened

In May 2019 the Australian design platform Canva was breached, exposing data for around 137 million users worldwide, including usernames, names, email addresses and hashed passwords [canva-media]. Canva disclosed the breach and prompted password resets.

Timeline

  • 2019-05 — Breach disclosed; ~137M accounts affected [canva-media].

Current status

Resolved; passwords reset and users notified. Figures are as reported. [canva-media]

Why it matters

One of the largest breaches to originate from an Australian company, with impact spread across a global user base.

GGOVERN Tabletop Exercises · Govern house Strengthen your cyber resilience — rehearse the decisions that matter. Book a Discovery Call →