Actor Claims Canva Dataset Exposes 900,000 User Records
Summary
A threat actor identified as xorcat allegedly posted a dataset of 900,000 Canva user records, including bcrypt password hashes, OAuth links, account identifiers, and usage metadata. The article says a 20-record sample was provided; the exposure is unverified.
Key points
- The article attributes the dataset post to xorcat and describes it as an alleged Canva data leak.
- The claimed dataset contains 900,000 user records; a 20-record sample was reportedly provided.
- Reported fields include user IDs, email addresses, full names, and bcrypt password hashes.
- The dataset reportedly lists Google, Facebook, and email as OAuth providers.
- Team and brand data, design counts, storage usage, account creation dates, and last-login details are also reported.
Article Details
- Victim Organization
- Canva
- Incident Type
- Alleged dataset leak
- Data Types Exposed
- User IDs
- Email addresses
- Full names
- Bcrypt-hashed passwords
- OAuth provider links (Google, Facebook, Email)
- Team and brand data
- Design counts
- Storage usage
- Account creation dates
- Last-login data
- Affected Records
- 900,000 user records (alleged)
- Operational Impact
- The alleged account and usage data could expose high-value enterprise or professional users and linked third-party accounts. No operational disruption is reported.
- Claim Status
- alleged