Disney is investigating a hack of the entertainment company’s internal Slack channels.
A hacker group called Nullbulge claims to have obtained and leaked more than 1 terabyte of data from Disney’s internal Slack channels.
The “hacktivist” group claims to focus on “protecting artists’ rights and ensuring fair compensation for their work.” It shared screenshots of documents the group allegedly downloaded, posting to X about traffic and revenue data for Disneyland Paris and what seems to be a new streaming feature that would recommend Disney content based on what viewers previously watched, with a promise to dump the entire haul online. In the group’s latest blog post, Nullbulge claims that the full scope of leaked data includes details about unreleased projects, raw images and computer code.
Why Social Video Is a Rival for Linear TV Ad Dollars
'House of the Dragon' Season 2 Finale Leaks on TikTok and Twitter/X
In an email to PvNew, the group claimed to gain access via “a man with slack access who had cookies.”
“The user was aware we had them,” the email said. “He tried to kick us out once but let us walk right back in before the second time.”
The message also claimed the group is based out of Russia and explained the hackers’ methodology.
“Disney was our target due to how it handles artist contracts, its approach to AI, and its pretty blatant disregard for the consumer,” the email continued. “We released the data because we knew making demands would do jack shit. If we said ‘Hello Disney, we have all your slack data,’ they would instantly lock down and try to take us out. In a duel, you better fire first.”
The Wall Street Journal, which first reported this story, has viewed a number of the files allegedly obtained and leaked by Nullbulge, which included “conversations about maintaining Disney’s corporate website, software development, assessments of candidates for employment, programs for emerging leaders within ESPN and photos of employees’ dogs, with data stretching back to at least 2019.”
“Disney is investigating this matter,” a Disney spokesman said.
You couldn’t blame anyone at Disney — with businesses that span its film and television studio, like Marvel Studios and Lucasfilm, as well as streaming services Disney+ and Hulu, cable networks like ESPN, theme parks and more — for a vague kind of PTSD.
A decade ago, Sony Pictures was the victim of a devastating hack. It is still considered to be the most significant corporate data breach in U.S. history, and much more than employee dog photos were on the line. Years’ worth of emails, ranging from benign to gossipy to incredibly unflattering, were leaked, wreaking havoc on show business. Academy Award winning producer Amy Pascal stepped down as co-CEO of the studio as a result. Names including Angelina Jolie, Rooney Mara and President Barack Obama were discussed in private communications published on Wikileaks. The studio was also brought to its knees, unable to rely on any sort of tech for days (accounting had to process payroll by hand) following the incident.
Jennifer Maas contributed to this report.
