Activist hacking group Nullbulge claimed to have leaked approximately 1.2 terabytes of Disney’s internal data from Slack, including information about unreleased projects, raw images, computer codes, and some logins, according to CNN*. The group stated that they gained access through a user who had Slack access and was aware of their presence.
Disney is currently investigating the matter. The hacktivist group targeted Disney due to its handling of artist contracts, its approach to artificial intelligence, and its perceived disregard for consumers. The group has been hinting at the data release on its social media for several weeks.
Nullbulge aims to protect artists’ rights and compensation, especially in the AI era. They believe making demands of Disney would be futile, hence the decision to leak the data. The incident is reminiscent of the 2014 Sony Pictures hack, which led to an international crisis.
Compromised email accounts can have devastating long-lasting effects, as they can often be the door to large swathes of sensitive information. Whether the hackers had inside help or they used info-stealing software, it highlights how even the biggest companies around the world are targeted and still suffer large data breaches.
Although the data from the original site has been pulled down, once the can of worms is opened, the data will never be redacted and will unfortunately remain on the internet forever. Due to it containing highly personal information and used by many of the world’s largest organisations, Slack is often targeted in an organisation and can be more easily intercepted than other more secure areas of a business network.
by Jake Moore, ESET
*ESET does not bear any responsibility for the accuracy of this information.
Comments