Canva
Disclosed May 24, 20197 years ago137,272,116 accountsUnverified
GnosticPlayers hacker takes data of about 139 million Canva users
Design platform Canva was hacked by an actor known as GnosticPlayers, who said data of roughly 139 million users was taken, including emails, names, cities and bcrypt-hashed passwords; Have I Been Pwned loaded 137 million accounts.
What is known
| People affected | 137,272,116 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | May 24, 2019 |
| Happened | May 24, 2019 |
| Attack | Hacking |
| Data exposed | Emails, Location, Names, Passwords |
| Sector | Tech · AU |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Canvahaveibeenpwned.com · Aggregator | Aggregator |
| Australian tech unicorn Canva suffers security breachzdnet.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | May 24, 2019 | |
| Have I Been Pwnedaccounts in the data | Aug 9, 2019 | 137,272,116 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Canva to https://www.zdnet.com/article/australian-tech-unicorn-canva-suffers-security-breach/ · seed source
- 2026-09-25 · country: empty to AU · seed source
- 2026-09-25 · attack: unknown to hacking · seed source
- 2026-09-25 · disclosed: 2019-08-09 to 2019-05-24 · seed source
- 2026-09-25 · summary: In May 2019, the graphic design tool website Canva suffered a data breach that impacted 137 million subscribers. The exposed data included email addresses, usernames, names, cities of residence and passwords stored as bcrypt hashes for user to Design platform Canva was hacked by an actor known as GnosticPlayers, who said data of roughly 139 million users was taken, including emails, names, cities and bcrypt-hashed passwords; Have I Been Pwned loaded 137 million accounts. · seed source
- 2026-09-25 · title: empty to GnosticPlayers hacker takes data of about 139 million Canva users · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.