Menu
Browse

Canva

Primary URL Location Industry
canva[.]com
Country Australia
Technology Icon
Technology
Profile

Canva operates as a web‑based graphic design platform that enables individuals and teams to create visual content using a drag‑and‑drop editor. The service provides a library of customizable templates for items such as social media posts, presentations, posters, flyers, invitations, and business documents. Users can add elements like shapes, icons, photos, and text, and they can upload their own assets or access integrated stock media collections. The platform supports real‑time collaboration, allowing multiple contributors to edit a design simultaneously and leave comments. Canva serves a broad market that includes educators, marketers, small business owners, nonprofit organizations, and individuals seeking personal projects. Its software is offered under a freemium model, with a free tier providing core functionality and paid subscriptions unlocking advanced features such as brand kits, premium templates, and extended storage.

The company’s headquarters are located in Australia, reflecting its origins as an Australian‑founded startup. In May 2019, a security incident disclosed that approximately 139 million user accounts had been affected, indicating the scale of Canva’s user base at that time. According to the breach disclosure, the compromised data included usernames, real names, email addresses, and geographic details for the affected users. Password information was protected using salted bcrypt hashing, and the hashes for about 61 million accounts were exposed, while Google authentication tokens were also leaked for a subset of accounts. The intrusion was attributed to the hacker known as GnosticPlayers, who was linked to a series of similar attacks on other organizations during the same period. Canva stated that there was no evidence of credential misuse resulting from the exposed hashes, but it nevertheless advised all users to change their passwords as a precaution. The company emphasized that its password storage remained secure due to the use of bcrypt, which is designed to resist brute‑force attempts. Beyond the breach, Canva distinguishes itself by focusing on lowering the barrier to design through a straightforward interface and a vast template ecosystem, positioning itself within the creative software sector as a tool for non‑designers. The service emphasizes accessibility, offering browser‑based access without the need for local installation, and it integrates with various third‑party services such as Google Drive, Dropbox, and social media platforms for seamless publishing. While the prompt does not detail ownership or parent‑subsidiary relationships, the publicly known fact is that Canva remains an independent, privately held entity.

Incidents
Linked incidents available to members
1 incident