Graphic design website Canva says it was hacked, user emails and passwords stolen

Canva users are being urged to change their passwords after it was hacked last week.

The graphic design tool company sent an email to its users saying it discovered an in-progress attack on Friday, May 24.

"As soon as we were notified we immediately took steps to identify and remedy the cause and have reported the situation to authorities (including the FBI). We are very sorry for any concern or inconvenience this may cause," the email said.

A number of the Canva community members' email addresses and passwords were stolen in the hack.

"The attacker also obtained cryptographically secure passwords (all passwords were individually salted and hashed with bcrypt). While this is industry best practice, it is possible to crack weak or obvious passwords with the use of enough computing power. For this reason, we recommend you change your password," the email said.

"Our team is working around the clock to deal with this situation, and we really appreciate your support and understanding," said Liz McKenzie, head of communications for Canva, in the email.

Comments are closed.