INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Canva Targets Australian Users with Malware via Phishing Attack

| 2026-10-16 06:30 HIGH LOW DATA BREACH
Executive Summary
AI-generated
On October 16, 2026, the Seven Deadly Sins hacker group claimed to have breached Canva and stolen over 200 million database rows. The allegedly compromised data includes 2 million Salesforce CRM records, enterprise licensing data, order-related PDFs, and data warehouse information. This incident affects Australia - Canva, a company based in Australia, with no further details provided on the targeted sector being logistics. The attack is attributed to the Seven Deadly Sins hacker group, but no additional information was available at press time. As of now, the full extent of the breach remains unclear, and it is not known how many individuals or organizations were affected by this incident.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
FIVE_EYES FIVE_EYES logisticslogistics
Incident Timeline
‎2026/10/16
The Seven Deadly Sins hacker group claimed to have breached Canva and stolen over 200 million database rows.
organisation Australia - Canva
organisation Canva
data_breach 200 database rows
organisation The Seven Deadly Sins
data_breach 2 CRM records
Tactical Metrics
Metrics
data_breach
200,000,000
Database Rows
Metrics
data_breach
2,000,000
Crm Records
Intelligence Sources
Bluesky Hackmanac 2026-10-16