Hacktivist group NullBulge claims to have released 1.1 terabytes of Disney’s internal Slack archives, reportedly including messages, unreleased projects, code, images, credentials, and internal links. The breach, allegedly facilitated by an inside collaborator, remained unconfirmed by Disney. The leaked data contains sensitive content and personal information, with indications that the legitimacy has been verified by security experts. This incident not only exposes Disney to the risks of intellectual property theft and privacy violations but also raises questions about the security of cloud platforms and SaaS.
Source: https://www.wired.com/story/disney-slack-leak-nullbulge/
TPRM report: https://scoringcyber.rankiteo.com/company/the-walt-disney-company
"id": "the000071624",
"linkid": "the-walt-disney-company",
"type": "Breach",
"date": "7/2024",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Entertainment',
'name': 'Disney',
'type': 'Entertainment'}],
'attack_vector': 'Insider Threat',
'data_breach': {'data_exfiltration': True,
'file_types_exposed': ['text', 'images', 'code'],
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['messages',
'unreleased projects',
'code',
'images',
'credentials',
'internal links']},
'description': 'Hacktivist group NullBulge claims to have released 1.1 '
'terabytes of Disney’s internal Slack archives, reportedly '
'including messages, unreleased projects, code, images, '
'credentials, and internal links. The breach, allegedly '
'facilitated by an inside collaborator, remained unconfirmed '
'by Disney. The leaked data contains sensitive content and '
'personal information, with indications that the legitimacy '
'has been verified by security experts. This incident not only '
'exposes Disney to the risks of intellectual property theft '
'and privacy violations but also raises questions about the '
'security of cloud platforms and SaaS.',
'impact': {'brand_reputation_impact': 'Significant',
'data_compromised': ['messages',
'unreleased projects',
'code',
'images',
'credentials',
'internal links'],
'identity_theft_risk': 'High'},
'initial_access_broker': {'entry_point': 'Internal Collaborator'},
'motivation': 'Hacktivism',
'post_incident_analysis': {'root_causes': 'Insider threat facilitated by an '
'internal collaborator'},
'recommendations': ['Enhance security measures for cloud platforms and SaaS',
'Monitor for insider threats'],
'threat_actor': 'NullBulge',
'title': 'Disney Slack Archives Breach by NullBulge',
'type': 'Data Breach'}