Disney's Massive Slack Data Breach: Hackers Leak Over 1 Terabyte of Corporate Conversations and Unreleased Project Details

United States of America
Disney has confirmed investigation but not yet commented on legitimacy or extent of the data breach
Disney is under investigation for a data breach
Hackers claimed to have obtained and leaked over 1 terabyte of data from Disney's Slack channels
Leaked data includes conversations about maintaining Disney's corporate website, software development, assessments of candidates for employment, programs for emerging leaders within ESPN and photos of employees. The scope of the leaked data is said to include details about unreleased projects, raw images and computer code.
Nullbulge targeted Disney due to its handling of artist contracts, approach to AI and disregard for consumers. The group had previously hinted at a giant release for weeks on its social media.
The hacking group Nullbulge gained access to Disney's Slack through an insider with cookies
Disney's Massive Slack Data Breach: Hackers Leak Over 1 Terabyte of Corporate Conversations and Unreleased Project Details

Disney is currently under investigation for a data breach, with hackers claiming to have obtained and leaked over 1 terabyte of data from the company's internal Slack channels.

The hacking group Nullbulge, which describes itself as a 'hacktivist group protecting artists' rights and ensuring fair compensation for their work,' gained access to Disney's Slack through an insider with cookies.

The leaked data includes conversations about maintaining Disney's corporate website, software development, assessments of candidates for employment, programs for emerging leaders within ESPN and photos of employees. The scope of the leaked data is said to include details about unreleased projects, raw images and computer code.

Disney has confirmed that it is investigating the matter but has not yet commented on the legitimacy or extent of the data breach.

The hacking group Nullbulge targeted Disney due to its handling of artist contracts, approach to AI and disregard for consumers. The group had previously hinted at a giant release for weeks on its social media, posting what appears to be visitor, booking and revenue data at Disneyland Paris.

This is not the first time that Disney has been targeted by hackers. In 2014, a megahack at Sony Pictures linked to North Korea led to an international crisis and exposed emails from company executives, celebrity aliases, social security numbers and entire movie scripts.

It is important to note that the information provided in this article comes from multiple sources with varying overall scores. While some sources may be more reliable than others, it is crucial to approach all information with skepticism and verify facts through multiple credible sources before drawing any conclusions.



Confidence

80%

Doubts
  • The extent and accuracy of the leaked data have not been confirmed.
  • The legitimacy of the hack and the identity of the hacking group have not been independently verified.

Sources

99%

  • Unique Points
    • Hacker group Nullbulge claims to have obtained and leaked over 1 terabyte of data from Disney’s Slack channels
    • The hacked data includes conversations about maintaining Disney’s corporate website, software development, assessments of candidates for employment, programs for emerging leaders within ESPN and photos of employees
    • The leaked data stretches back to at least 2019
  • Accuracy
    • Disney is investigating the matter
  • Deception (100%)
    None Found At Time Of Publication
  • Fallacies (100%)
    None Found At Time Of Publication
  • Bias (100%)
    None Found At Time Of Publication
  • Site Conflicts Of Interest (100%)
    None Found At Time Of Publication
  • Author Conflicts Of Interest (100%)
    None Found At Time Of Publication

80%

  • Unique Points
    • NullBulge claimed to have leaked 1.1 TB of Disney’s Slack archive.
    • The group targeted Disney due to alleged violations of promoting crypto currencies, AI-generated artwork, or theft from Patreon or other platforms.
  • Accuracy
    • The data allegedly includes messages, files, login credentials, and links from nearly 10,000 channels.
    • The hacked data includes conversations about maintaining Disney’s corporate website, software development, assessments of candidates for employment.
    • Disney is investigating the matter
    • Nullbulge gained access to Disney’s Slack through a man with access who had cookies
  • Deception (30%)
    The article contains selective reporting as the author only reports details that support the hackers' claims without providing any context or fact-checking. The author also uses emotional manipulation by describing the leaked data as a 'trove of data' and '1.1-TB dump', implying its significance and impact, which may influence readers' emotions and perceptions.
    • A group calling itself ‘NullBulge’ published a 1.1-TB trove of data late last week that it claims is a dump of Disney’s internal Slack archive.
    • The data allegedly includes every message and file from nearly 10,000 channels, including unreleased projects, code, images, login credentials, and links to internal websites and APIs.
    • Disney did not confirm the breach or return multiple requests for comment about the legitimacy of the stolen data.
  • Fallacies (85%)
    The author makes an appeal to authority when quoting Roei Sherman's opinion on the ease of attacking cloud platforms and the legitimacy of the leaked data. The author also uses inflammatory rhetoric by describing the hackers as a 'hacktivist group protecting artists' rights' and 'punishing someone.'
    • > A lot of URLs, conversations of employees, some credentials, and other content.<
    • > What better way to punish someone than getting them in trouble eh?<
  • Bias (95%)
    The author expresses a clear disapproval of the hackers' actions and their motives, implying a bias against them. She also quotes Roei Sherman expressing his opinion that companies are frequently breached and it is easier for attackers to target cloud platforms. This does not constitute bias but adds context to the article.
    • ]A group calling itself [NullBulge] published a 1.1-TB trove of data late last week that it claims is a dump of Disney’s internal Slack archive.[
      • Security researchers have long warned about corporate Slack accounts as a treasure trove for attackers if compromised.
        • The group claims it hacks only targets that violate one of three ‘sins.’ First: ‘We do not condone any form of promoting crypto currencies or crypto related products/services.’ Second: ‘We believe AI-generated artwork harms the creative industry and should be discouraged.’ And third: ‘Any theft from Patreons, other supportive artist platforms, or artists in general.[
        • Site Conflicts Of Interest (100%)
          None Found At Time Of Publication
        • Author Conflicts Of Interest (100%)
          None Found At Time Of Publication

        98%

        • Unique Points
          • Nullbulge targeted Disney due to how it handles artist contracts, its approach to AI, and its disregard for consumers.
          • The leaked information includes internal communications, images, logins, studio information, ad campaigns and other data mostly from Slack platform that is not included in other articles.
        • Accuracy
          • Disney is investigating the matter
          • Hackers claim to have over one terabyte of data from Disney
          • Disney is the victim of a cybersecurity incident
        • Deception (100%)
          None Found At Time Of Publication
        • Fallacies (95%)
          The author makes several statements that do not contain logical fallacies. However, there are a few instances of inflammatory rhetoric and an appeal to authority. The author states that 'Nullbulge is claiming responsibility for the hack' and describes the group as 'a hacktivist group protecting artists rights and ensuring fair compensation for their work.' This is an example of an appeal to authority, as the author is trusting the claims made by Nullbulge without providing any evidence or verification. Additionally, when describing why Nullbulge targeted Disney, the author states 'its pretty blatant disregard for the consumer.' This statement contains inflammatory rhetoric and does not provide any evidence or reasoning to support this claim.
          • ]A hacktivist group protecting artists rights and ensuring fair compensation for their work.[/
          • Its pretty blatant disregard for the consumer.
        • Bias (100%)
          None Found At Time Of Publication
        • Site Conflicts Of Interest (100%)
          None Found At Time Of Publication
        • Author Conflicts Of Interest (100%)
          None Found At Time Of Publication

        84%

        • Unique Points
          • An activist hacking group, Nullbulge, claimed responsibility for leaking thousands of Disney’s internal messaging channels
          • Nullbulge gained access to Disney’s Slack through a man with access who had cookies
        • Accuracy
          • Hacker group Nullbulge claims to have obtained and leaked over 1 terabyte of data from Disney’s Slack channels
          • Disney is investigating a hack of its internal Slack channels
        • Deception (30%)
          The author makes editorializing statements by expressing the hackers' perspective and justification for their actions without providing any evidence or context to support their claims. The article also contains selective reporting as it only mentions the hackers' stated reasons for targeting Disney without mentioning any potential counterarguments or alternative perspectives.
          • The group also stated that it wants to protect artists’ rights and compensation for their work, especially in the age of artificial intelligence.
          • Disney was our target due to how it handles artist contracts, its approach to AI, and its pretty blatant disregard for the consumer.
        • Fallacies (100%)
          None Found At Time Of Publication
        • Bias (100%)
          None Found At Time Of Publication
        • Site Conflicts Of Interest (100%)
          None Found At Time Of Publication
        • Author Conflicts Of Interest (100%)
          None Found At Time Of Publication