Türkiye’s Personal Data Protection Authority (KVKK) published a notice regarding a data breach involving Canva Pty Ltd.
The incident stemmed from unauthorized access to a third-party tool used by Canva, potentially exposing employee names, work email addresses, workplace locations and business phone numbers, along with contracts, invoices and other corporate documents. Data linked to 424 organizations in Türkiye was affected, while the number of impacted individuals has not yet been determined.