Canva urges users to change passwords following data breach affecting up to 139 million users
Graphic design toolset Canva is advising users to change their login credentials after the company’s database was reportedly compromised in a cyber attack Friday.
The attack targeted usernames and email addresses, affecting up to 139 million users globally. Passwords were also obtained, but Canva assured users that passwords have been “salted and hashed with bcrypt,” meaning they remain unreadable by third parties. The platform recommends that users change their passwords as a precaution.
“Our teams have been working around the clock to investigate the attack and communicate with our customers,” Canva said on Monday. “We are continuing to investigate and are being thorough and methodical with our examinations… We have also engaged forensic experts to investigate the incident.”
Why we should care
Canva is known to provide a wide range of free (or low-cost) creative tools and stock designs, making it an attractive platform for small marketing teams and novice designers. The platform has been working to deliver more resources and graphic toolkits with the recent acquisition of stock photo services Pexels and Pixabay – as well as a recently-launched subscription service for premium images, Photos Unlimited.
While the new tools may prove to be a valuable creative resource for marketing teams, those who use (or have used) Canva should be wary of the security breach and change passwords before diving back in.
More on what happened
Canva said there is currently no indication that user designs were stolen by the hackers, and that credit card details remain safe and “confidential.”
Those using Facebook or Google to login to Canva were reportedly not affected by the breach.
A quick note about the reviews I do on this site. The product vendors may give me access to their products for free in order for me to do my review, alternatively, I may have bought the product myself. However I make no promises to vendors regarding what I write in my review. Should you click a link that takes you to a sales page for a paid product for sale this link will be an affiliate link and I will be paid a percentage of the sales price should you decide to invest in it.