Canva hit by cyberattack through compromised Salesforce instance

The group The Seven Deadly Sins claims responsibility for an attack on Canva via a compromised Salesforce vendor.

Published 7sem2 sources✓ ConfirmedNotableupdated 6sem

≈ 19sSpeed

The fact

Data from Canva customers and other companies may have been exposed.

The incident highlights a flaw in the software supply chain.

2 sources — click a link to read an article on the topic:

Explore this topic

Auto-synthesis from 2 media sources · identified on September 23, 2026