ReportedReported by fewer than three independent publishers, with no official finding.
Canva hacked via vendor’s Salesforce instance; Other customers affected as well (1)
A new dedicated leak site by threat actors calling themselves “The Seven Deadly Sins” lists Canva Pty Ltd among the sites that haven’t paid them. DataBreaches obtained additional details on the incident and this new...
DII-2026-003064 sources ↓
What happened
Not publicly disclosed.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.
DataBreaches.net
Canva hacked via vendor’s Salesforce instance; Other customers affected as well (1)
23 September 2026