Canva Enterprise Customer Data Exposed in Third-Party Breach via Canny On 29 August, Australian design platform Canva disclosed a security breach involving Canny, a third-party customer feedback tool integrated with its Salesforce account. The unauthorized access exposed limited enterprise customer data, including business contact details and contract information, primarily affecting larger corporate clients managed by Canva’s sales team. Canva confirmed that its core platform, databases, and user accounts remained secure, with no compromise of passwords, designs, or content. The company revoked Canny’s access immediately and notified affected customers. The incident highlights risks in third-party vendor integrations, particularly for enterprises handling sensitive corporate data. Canny, the compromised feedback platform, first alerted Canva to the breach, prompting the investigation. While the full scope of the exposed data remains unclear, the breach underscores the growing threat of supply-chain attacks in enterprise security. No further details on the attacker’s identity or motives have been released.