Every public data breach

47 disclosed this week · 26,367 on record

Canva

Disclosed May 24, 2019137,272,116 accountsUnverified

GnosticPlayers hacker takes data of about 139 million Canva users

Design platform Canva was hacked by an actor known as GnosticPlayers, who said data of roughly 139 million users was taken, including emails, names, cities and bcrypt-hashed passwords; Have I Been Pwned loaded 137 million accounts.

What is known

People affected137,272,116 (accounts in the leaked data, per Have I Been Pwned)
DisclosedMay 24, 2019
HappenedMay 24, 2019
AttackHacking
Data exposedEmailsLocationNamesPasswords
SectorTech · AU
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
source_type2026-09-25
aggregator to pressby seedSource
source_url2026-09-25
https://haveibeenpwned.com/Breach/Canva to https://www.zdnet.com/article/australian-tech-unicorn-canva-suffers-security-breach/by seedSource
country2026-09-25
empty to AUby seedSource
attack2026-09-25
unknown to hackingby seedSource
disclosed2026-09-25
2019-08-09 to 2019-05-24by seedSource
summary2026-09-25
In May 2019, the graphic design tool website Canva suffered a data breach that impacted 137 million subscribers. The exposed data included email addresses, usernames, names, cities of residence and passwords stored as bcrypt hashes for user to Design platform Canva was hacked by an actor known as GnosticPlayers, who said data of roughly 139 million users was taken, including emails, names, cities and bcrypt-hashed passwords; Have I Been Pwned loaded 137 million accounts.by seedSource
title2026-09-25
empty to GnosticPlayers hacker takes data of about 139 million Canva usersby seedSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Canva