Threat Intelligence

THE SEVEN DEADLY SINS Claims Australian Technology Firm Canva on Its Leak Site

ransomware.live · 16 Oct 2026

Key Takeaway Australian technology and software businesses should review which staff and third-party tools can access customer data, turn on multi-factor authentication everywhere, and have an incident response plan ready in case their name appears on a leak site.

This claim is unverified, and Canva has not confirmed an incident. The ransomware group THE SEVEN DEADLY SINS has listed the company, which operates the design platform at canva.com, on its leak site. The listing was posted on 16 October 2026 and picked up the same day by the public tracker ransomware.live.

Ransomware groups sometimes list companies they never breached, add names during negotiations, or get details wrong, so a listing alone does not show that any systems were accessed. The tracker has not verified the claim, and no size of any claimed data set has been given in the listing.

Canva is a widely used Australian technology brand, and many small businesses rely on it or on similar cloud platforms. Until there is a statement from the company, customers should treat the situation as unconfirmed and watch for official communications rather than relying on the group's claims.

ransomware dark web leak site THE SEVEN DEADLY SINS Technology Canva

Summarised by CISO AI from ransomware.live, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.