‼️🇦🇺 Alleged Dataset Leak of Canva Exposes 900,000 User Records With Bcrypt Passwords, OAuth Pr...

Summary

An alleged dataset containing approximately 900,000 Canva user records has been leaked, including bcrypt-hashed passwords, OAuth provider information, and design platform usage data. The breach affects users of the popular design platform and raises concerns about credential compromise and account takeover risk. The incident highlights ongoing threats to user authentication systems even when passwords are properly hashed.

Indicators of Compromise

• malware — Canva user dataset