Disney Experiences Massive Data Breach Through Slack Channels

By Netvora Tech News

A 25-year-old American man has admitted to stealing 1.1 terabytes of sensitive data from Walt Disney's Slack channels. The individual compromised the personal computer of a Disney employee by distributing a program online, including on GitHub, that was designed to generate AI art. However, the program contained malware that granted the perpetrator access to his victims' computers.

The malware allowed the perpetrator not only to access the computer but also an online account of the Disney employee, where they stored passwords for their personal and work accounts. The stolen data included login credentials for internal Disney Slack channels, which the perpetrator downloaded in May last year.

Threats and Data Dump

After the employee failed to respond to the perpetrator's demands, the individual published the stolen internal Slack data, as well as the medical, financial, and personal information of the Disney employee, on various online platforms in July 2024.

The perpetrator also admitted to making at least two other victims besides the Disney employee.

Scope of the Breach

The stolen data is estimated to be around 1.1 terabytes, making it one of the largest data breaches in recent history. The incident highlights the importance of cybersecurity measures and the need for companies to protect their employees' personal data.

Legal Consequences

The perpetrator is currently facing legal consequences for the breach. The incident serves as a wake-up call for companies to prioritize cybersecurity and take measures to prevent similar breaches in the future.

• The perpetrator compromised the personal computer of a Disney employee.
• The stolen data included login credentials for internal Disney Slack channels.
• The perpetrator published the stolen data and personal information of the Disney employee online.
• At least two other victims were also affected.

Note: The perpetrator's identity and any further details about the victims have been omitted for privacy and security reasons.