Disney Hacked: Group Claims to Possess Trove of Data, Company Launches Investigation

It's concerning news about Disney being targeted in a cybersecurity incident, reportedly involving more than one terabyte of data. The hacktivist group "Nullbulge" has claimed responsibility, citing their mission as protecting artists' rights and advocating for fair compensation.

AARONP/BAUER-GRIFFIN/GC IMAGES

Disney has confirmed that they are investigating the matter, but further details about the extent of the breach and the specific data affected have not been disclosed yet. Cybersecurity incidents like these highlight ongoing challenges in safeguarding digital assets and sensitive information, particularly in industries where intellectual property and customer data are at risk.

The breach at Disney has exposed a vast amount of sensitive information, including internal communications, images, logins, studio details, ad campaigns, and more, primarily sourced from the Salesforce-owned communications platform Slack.

This cyberattack is part of a broader trend targeting media and telecom companies in 2024. Earlier in the year, Roku experienced a data breach compromising over half a million accounts. In May, Ticketmaster owner Live Nation reported a cyberattack where "criminal threat actors" sold user data on the dark web.

These incidents underscore the increasing vulnerability of major corporations to cyber threats, emphasizing the need for robust cybersecurity measures and constant vigilance to protect sensitive information and maintain customer trust.

Earlier this month, AT&T disclosed a significant cybersecurity incident where "nearly all" of its wireless customers had their call and text records obtained. Crucially, the content of the messages was not breached.

The breaches at Ticketmaster and AT&T both involved a third-party cloud provider, Snowflake, though there is no indication at this time that the Disney hack is connected to these incidents.

The hacktivist group Nullbulge, claiming responsibility for the Disney hack, told The Wall Street Journal it targeted Disney "due to how it handles artist contracts, its approach to AI, and its blatant disregard for the consumer." This highlights ongoing concerns over corporate practices and the increasing activism within the cyber community.