An activist hacking group known as Nullbulge has claimed responsibility for leaking thousands of Disney's internal messaging channels. The leaked information reportedly includes details about unreleased projects, raw images, computer codes, and some logins.
Nullbulge stated that they accessed approximately 1.2 terabytes of data from Disney's Slack, a popular communications software. The group claimed to have gained entry through an individual with Slack access who had cookies. They also mentioned being based in Russia.
Disney has acknowledged the breach and stated that they are currently investigating the matter. The entertainment giant's operations span various divisions and companies, such as ESPN, Hulu, and Disney+.
The hacking group emphasized their goal of protecting artists' rights and ensuring fair compensation for their work, particularly in light of advancements in artificial intelligence. They criticized Disney's handling of artist contracts, approach to AI, and alleged disregard for consumers.
Nullbulge had been teasing the release of the leaked data on social media platforms in the weeks leading up to the incident. The group previously hinted at having access to visitor, booking, and revenue data related to Disneyland Paris.
The issue of artificial intelligence has been a contentious topic in recent industry negotiations, including disputes involving the Screen Actors Guild and the Writers Guild of America. Concerns have been raised about AI potentially replacing writers and actors in the creative process.
The hackers explained that they chose to leak the data rather than make demands to Disney, as they believed the company would respond aggressively if approached directly. They likened the situation to a duel where it is better to act first.
Notably, the incident draws parallels to the 2014 megahack at Sony Pictures, which was linked to North Korea and resulted in a significant data breach exposing sensitive information such as emails, celebrity aliases, and movie scripts.