Disney’s recent data breach in July revealed far more than initially reported, exposing a massive range of sensitive information. While the initial focus was on stolen Slack messages, it turns out the breach reached deep into the company’s critical corporate files. Sources indicate that hackers accessed financial projections, strategic plans, sales data, and even Disney’s streaming forecasts.
What’s more troubling is that the hackers didn’t stop at corporate data. They also accessed personal information of Disney Cruise Line members, including passport numbers, visa statuses, contact details, and birthplaces. Additionally, data related to theme park pass sales was compromised, potentially affecting thousands of visitors.
Disney previously revealed that over a terabyte of data was leaked, but the full extent of the breach is still under investigation. In August, the company addressed investors, acknowledging the gravity of the attack and raising concerns about the cybersecurity measures in place at major corporations.
The hacking group Nullbulge has since claimed responsibility, boasting in a blog post that they gained access to internal data on upcoming projects as well as employee details stored in Disney’s Slack system.
When asked about the breach, Disney declined to comment on the specifics. A spokesperson emphasized, “We decline to comment on unverified information that has purportedly been obtained as a result of illegal activity.” This statement highlights the complex and evolving battle companies face in safeguarding their sensitive information.
As cyber threats continue to evolve, this incident serves as a stark reminder of the vulnerabilities lurking within even the most prominent organizations, pushing the need for robust cybersecurity to the forefront.
