A significant data breach involving personal information from 571 Canva Creators program participants was exposed through an unsecured AI chatbot database operated by My Jedai, a Russian company. The exposed data included email addresses, countries of residence, and comprehensive responses to 51 questions about their experiences with Canva’s creator platform. The data leak creates dual risks: for creators, it provides a ready-made phishing toolkit, while for Canva, it reveals competitive intelligence about program strengths and weaknesses along with creator contact information.