What is a data breach?
A data breach occurs when cybercriminals hack into an organization's databases and steal sensitive information. The data, which is exposed to the public, can include, passwords, account numbers, correspondence, names, home addresses, Social Security numbers, and more.
Company Name: Canva
Domain Name: canva.com
Date Breach Originally Occurred: May 24, 2019
Type of Information Breached: Email addresses, Geographic locations, Names, Passwords, Usernames
Breach Overview: In May 2019, the graphic design tool website Canva suffered a data breach that impacted 137 million subscribers. The exposed data included email addresses, usernames, names, cities of residence, and passwords stored as bcrypt hashes for users not using social logins. The data was provided to HIBP by a source who requested it be attributed to "JimScott.Sec@protonmail.com".
Total Number of Accounts Affected: 137,272,116
Have I Been Pwned?
Pwned Passwords
Pwned Passwords are hundreds of millions of real world passwords previously exposed in data breaches. This exposure makes them unsuitable for ongoing use as they're at much greater risk of being used to take over other accounts. They're searchable online below as well as being downloadable for use in other online systems. Read more about how HIBP protects the privacy of searched passwords.