This summer, Disney’s internal communications pipeline suffered a data breach. We now know that as a result of this breach, guests and employees were impacted and had their personal information stolen by hackers.
Earlier this summer, a hacker group called “NullBulge” Get access After infiltrating Disney’s internal Slack channel, more than 1 terabyte of sensitive data was obtained from Disney. Now, a new Report Depend on wall street journalA review of the leaked documents revealed more information about the specific contents of the stolen documents.
[UPDATE: Disney responds] Death at Disney World sparks legal battle over Disney+ terms of service
The leak included more than 44 million messages found in Disney’s Slack workplace channels. This also includes approximately 18,800 spreadsheet files and 13,000 PDFs. The information leaked by the hackers was limited to files posted by Disney employees on the Disney Slack channel, with both private and public channels affected. No private direct messages between Disney employees in Slack were found in the leaked information.
While some of Disney’s internal corporate information and financial data were part of the stolen data, the most concerning details involve private data belonging to Disney theme park and Disney Cruise Line customers and employees.
Disney staff and guests were doxed
The Disney data leaked by the hackers included private information about Disney Cruise Line employees and guests, as well as theme park visitors.
The actual addresses, dates of birth, passport numbers, visa information and even current assignments of Disney Cruise Line crew members were found in the data stolen by the hackers.
Mix and match speed of light
Another file contained names, addresses and phone numbers associated with passengers on Disney cruise ships.
Information about Disneyland visitors was also found in the leaked data. It appears that the names and contact information of a group of Disneyland guests who made dining reservations at the park were leaked.
It’s unclear how many Disneyland and Disney Cruise Line guests and employees were affected.
Disney internal streaming, theme park financials
The leak included new financial information for Disney’s streaming service Disney+.
Disney+ generated more than $2.4 billion in revenue in the second quarter of 2024, according to an internal spreadsheet discovered in the leak.
While Disney does publicly report its streaming financials to investors, wall street journal pointed out that Disney did not disclose specifically how much its respective streaming services – Disney+, Hulu and ESPN+ – contributed to the overall total. According to leaked revenue data, Disney+ contributed 43% of revenue to Disney’s direct-to-consumer entertainment business. wall street journal.
The leak also includes some very interesting financial details about Disney theme parks. Between October 2021 and June 2024, Disney’s additional theme park service Genie+ brought in more than $724 million in revenue to Disney World at Disney Resort in Orlando, Florida. Genie+ is a paid service that allows Disney World guests to queue directly into theme park attractions. Disney replaced Genie+ in July with a similar paid add-on called Lightning Lane.
Mashable has reached out to Disney for comment and will update this article if we hear back.