Canva, the Australia-based graphic-design online application, has been hit by an enormous data breach. Apparently, the usernames and email addresses of 139 million users of Canva have been exposed.
Passwords were also obtained but they remain intact as they are salted and hashed with bcrypt, making them unreadable for external parties.
According to the official statement, on May 24 the company became aware of a security incident. “As soon as we were notified, we immediately took steps to identify and remedy the cause, and have reported the situation to authorities (including the FBI),” Canva added.
Data of Millions of Canva Users Exposed
It appears that data of approximately 139 million users has been obtained. It is interesting to note that the number of affected users has been shared by the hacker himself, who contacted ZDNet.
According to ZDNet, the hacker behind the data breach is the infamous GnosticPlayers. The hacker (or hacker group) has put up for sale on the dark web data belonging to 932 million users stolen from 44 companies. And the statistics are for this year alone.
Тhe hacker downloaded everything up to May 17, the hacker told ZDNet, but “they detected my breach and closed their database server.”
The technology media requested a sample of the breached data to verify the hack. The hacker sent them a sample consisting of 18,816 accounts. Then they used the received information to contact Canva users, who verified its validity.
ZDNet is also the first to contact Canva, informing the company of the data breach and requesting an official statement.
The company is now working with a forensics team that specializes in these types of attacks and the FBI to diagnose exactly what happened and are putting processes in place to help prevent another attack, the official statement says.
In fact, Canva is one of Australia’s biggest tech companies.
Because of its simple and user-friendly interface, the Canva website has become very popular among users wishing to design logos, marketing materials, etc. Since its launch, the website’s Alexa website traffic rank has improved a lot, and has recently entered the Top 200, currently ranked at number 170, which is quite an achievement.