Disney

Matthew Van Andel's wrongful termination complaint against Disney stems from a malware incident that compromised the company’s cybersecurity. After installing a seemingly legitimate AI tool, Van Andel and Disney suffered a hack resulting in the exposure of sensitive financial and employee data. Attackers leaked Van Andel's personal information, such as credit card and social security numbers, causing significant distress and requiring extensive efforts to secure affected accounts. The cyber attack's reach into personal and company data, combined with the potential damage to Disney's finances and reputation, depicts a dire situation.

Source: https://www.cbsnews.com/losangeles/news/former-disney-employee-files-wrongful-termination-complaint-after-cyber-attack/

TPRM report: https://scoringcyber.rankiteo.com/company/the-walt-disney-company

"id": "the409030225",
"linkid": "the-walt-disney-company",
"type": "Breach",
"date": "2/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Entertainment',
                        'name': 'Disney',
                        'type': 'Entertainment Company'}],
 'attack_vector': 'Malicious AI tool installation',
 'data_breach': {'personally_identifiable_information': ['credit card numbers',
                                                         'social security '
                                                         'numbers'],
                 'type_of_data_compromised': ['financial data',
                                              'employee data',
                                              'personal information']},
 'description': "Matthew Van Andel's wrongful termination complaint against "
                'Disney stems from a malware incident that compromised the '
                'company’s cybersecurity. After installing a seemingly '
                'legitimate AI tool, Van Andel and Disney suffered a hack '
                'resulting in the exposure of sensitive financial and employee '
                "data. Attackers leaked Van Andel's personal information, such "
                'as credit card and social security numbers, causing '
                'significant distress and requiring extensive efforts to '
                "secure affected accounts. The cyber attack's reach into "
                'personal and company data, combined with the potential damage '
                "to Disney's finances and reputation, depicts a dire "
                'situation.',
 'impact': {'brand_reputation_impact': ['significant distress',
                                        "potential damage to Disney's "
                                        'reputation'],
            'data_compromised': ['financial data',
                                 'employee data',
                                 'personal information including credit card '
                                 'and social security numbers']},
 'initial_access_broker': {'entry_point': 'AI tool installation'},
 'response': {'remediation_measures': ['extensive efforts to secure affected '
                                       'accounts']},
 'title': 'Malware Incident at Disney',
 'type': 'Malware Incident'}