The Walt Disney Company Details

    Organization Logo

    The Walt Disney Company

    Burbank, California • 195800 employees • Media and Entertainment

    https://www.disney.com/
    United States

    Industry

    Media and Entertainment

    Security Incidents

    1

    The Walt Disney Company, often simply referred to as Disney, is a diversified multinational entertainment and media conglomerate headquartered in Burbank, California. It is known worldwide for its iconic characters such as Mickey Mouse, its classic animated feature films, theme parks, and merchandise. Beyond animation, Disney also owns and operates ABC broadcast network, ESPN, Pixar, Marvel Studios, and Lucasfilm, playing a dominant role in the global entertainment industry.

    Security Incidents

    The Walt Disney Company Breach of Jul 2024
    Severity Score
    High

    Type

    Data Breach

    Summary

    A hacktivist group named "NullBulge" claimed responsibility for breaching Disney's internal Slack channels, extracting approximately 1.1 terabytes of data. This data includes confidential details from 10,000 Slack channels, encompassing internal projects, raw images, source code, login credentials, internal API links, and employee information.

    The breach was disclosed on July 12, 2024, via a post on the data leak marketplace Breachforums. The attackers mentioned that they had an insider at Disney who assisted in the initial stages but later withdrew support, causing the attackers to go public...
    Show more

    Severity

    The recent cyber breach at Disney, attributed to the hacktivist group "NullBulge," involved the exfiltration of approximately 1.1 TB of data from the company's Slack channels. This included sensitive details like raw images, code for unannounced projects, login credentials, internal API links, and various employee information. The attackers also claim to have had insider assistance, although their mole ceased cooperation midway, limiting further data compromise.

    The sophistication of the attack, combined with the significant amount of stolen data and potential for serious abuse of the informa...
    Show more

    Impact

    The Disney cyber incident was allegedly a significant data breach orchestrated by the hacktivist group "NullBulge," involving unauthorized access to Disney's internal Slack channels. Over a terabyte of data was exfiltrated, including files, chat messages, raw images, source code, some login credentials, links to internal APIs, and other sensitive information from about 10,000 Slack channels.

    Internal company data, including details about unreleased projects, screenshots, employee personal information, and potentially sensitive communications, was stolen and made public. This breach could exp...
    Show more

    KEEP YOUR ENVIRONMENT SECURE

    Weak credentials are the leading cause of breaches. Beyond Identity can help.

    See MFA exploits in action
    Watch how adversaries exploit companies in quick videos