---
title: "Data breach at Canva"
description: "In May 2019, Canva suffered a data breach. 137 million accounts were affected. The exposed data includes email addresses, postal addresses, names, passwords and account identifiers."
canonical: https://inyourgeek.com/en/fuites-de-donnees/2019-05-24-canva
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2019-08-09
dateModified: 2019-08-09
---
# Canva

Data breach — High

In May 2019, Canva suffered a data breach. 137 million accounts were affected. The exposed data includes email addresses, postal addresses, names, passwords and account identifiers.

| Fact | Value |
| --- | --- |
| Disclosed on | August 9, 2019 |
| Incident dated | May 24, 2019 |
| Accounts affected | 137M |
| Sector | Retail |
| Country | International or undetermined |
| Cause | Undisclosed |
| Severity | High |
| Status | Confirmed |

## Exposed data

- Email address
- Postal address
- Full name
- Password (hashed)
- Customer ID

## What you can do

- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Have I Been Pwned — Canva](https://haveibeenpwned.com/Breach/Canva) — Have I Been Pwned (CC BY 4.0)

_Entry built from Have I Been Pwned’s structured data, with no model rewriting._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2019-05-24-canva
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees