Canva uses 1Password to secure ID during growth phase | Computer Weekly

"In May 2019, graphic design platform Canva fell victim to a major cyber security breach in which a threat actor known as Gnosticplayers hacked its database and stole the personal data of over 100 million users, including their usernames, email addresses and bcrypt-hashed passwords. In the wake of this unfortunate incident, the Sydney, Australia-based company ploughed significant investment into cyber security measures, alongside which came a new engagement with credential management service 1Password."

"By the time Kane Narraway arrived at the firm as head of enterprise security towards the end of 2023, the firm had righted the ship and entered a major growth phase as its active user base ballooned to over 260 million per month, generating over $3.5bn (£2.5bn) in annualised revenues. This went alongside a fivefold increase in headcount since 2020, and an expanding global base of operations."

"Narraway, who previously worked in security roles at Shopify and Atlassian, and also spent some time working on digital forensics for the UK government - although he now calls New Zealand home - says that managing this phase has proved an interesting challenge. Indeed, throughout his time at the firm so far, says Narraway, the pressure to maintain and improve its security posture has been immense."

In May 2019 Canva suffered a cyber security breach by Gnosticplayers that exposed over 100 million users' data, including usernames, email addresses and bcrypt-hashed passwords. The company invested heavily in cyber security and engaged credential management service 1Password. By late 2023 Kane Narraway joined as head of enterprise security after the company recovered and entered a major growth phase, reaching over 260 million monthly active users and generating over $3.5bn (£2.5bn) in annualised revenue. Headcount increased fivefold since 2020 with expanding global operations. Narraway's role focuses on protecting enterprise customers, managing onboarding and access, mitigating shared-account risks, and balancing security with developer efficiency amid rapid scaling.

Read at ComputerWeekly.com