A data breach occurred in Disney’s internal communications channels over the summer, affecting guests and employees whose personal information was found to have been stolen by hackers.
Earlier this summer, a group of hackers known as “NullBulge” Accessed They hacked into Disney’s internal Slack channel and stole over 1TB of confidential data. Report By The Wall Street JournalAfter viewing the leaked files, the company revealed further details about what was contained in the stolen files.
(Update: Disney responds) Disney World fatal accident leads to legal battle over Disney+ terms of use
The leaked data includes more than 44 million messages found in Disney’s Slack work channels, including approximately 18,800 spreadsheet files and 13,000 PDFs. The data leaked by the hackers was limited to files posted by Disney employees to Disney’s Slack channels, and both private and public channels were affected. Private direct messages between Disney employees on Slack were also not included in the leak.
The trove of stolen data included internal Disney and financial information, but of most concern was the personal data of customers and employees of Disney theme parks and Disney Cruise Line.
Personal information of Disney staff and guests exposed
The Disney data leaked by the hackers includes personal information of Disney Cruise Line staff, guests and theme park attendees.
The data stolen by the hackers included addresses, birth dates, passport numbers, visa information and even current employment details of Disney Cruise Line crew members.
Mashable Lightspeed
Another file contained the names, addresses and phone numbers of Disney Cruise Line passengers.
The leaked data also included information about Disneyland guests, apparently revealing the names and contact details of “cluster” guests who had made dining reservations within the park.
It is unclear exactly how many Disneyland and Disney Cruise Line guests and staff members were affected.
Inside Disney Streaming, Theme Park Finances
The leak also includes new financial information about Disney’s streaming service, Disney+.
According to an internal spreadsheet found in the leaked data, Disney+ generated more than $2.4 billion in revenue in the second quarter of 2024.
Disney has disclosed streaming financial information to investors, The Wall Street Journal Disney noted that it hasn’t disclosed how much each streaming service, Disney+, Hulu, and ESPN+, contributes to its overall revenues, though leaked revenue data suggests that Disney+ accounts for 43% of Disney’s direct-to-consumer entertainment revenues. The Wall Street Journal.
The leak also includes some very interesting financial information about Disney’s theme parks. Between October 2021 and June 2024, Disney’s theme park add-on service, Genie+, brought in more than $724 million in revenue for Disney World, Disney’s resort complex in Orlando, Florida. Genie+ was a paid service that allowed Disney World guests to skip the front of the lines for theme park attractions. Disney replaced Genie+ with a similar paid add-on service, Lightning Lane, in July.
Mashable has reached out to Disney for comment and will update this post if we hear back.
