Unverified entries are claims made by criminal groups. We list them so analysts can track them, and they may be false.
Entries are listed newest first by the date on each row: the confirming source's date for verified entries, and for unverified entries the news report's date or the date CyberStack first listed them (recorded from 2 Nov 2026). Entries with none of these are under 'Earlier listings (date not recorded)' in alphabetical order. No tracker dates are shown or used.
Leak sites are not linked.
Unverified: claimed by The Seven Deadly Sins, not confirmed by the company
Tracker entry (ransomware.live, third-party; may show leak-site screenshots)
Canva confirmed a narrower exposure: limited enterprise customer information, through third-party tool Canny's access to its Salesforce account. Source: Capital Brief (21 Sep 2026)
Company site: canva.com