Share this article on:
In light of the major data breach it suffered in July, Disney has announced that it is moving away from the cloud-based team communication platform Slack.
In July, threat actors from a group called NullBulge announced on X (formerly Twitter) that it had stolen over a terabyte of Disney’s internal development Slack channel.
“1.1TiB of files and chat messages. Anything we could get our hands on, we downloaded and packaged up. Want to see what goes on behind the doors? go grab it,” the group said.
The group posted a link to the alleged stolen data, which it claims contains “unreleased projects, raw images and code, some logins, links to internal api/web pages, and more”.
The group also claims to have had an inside man at Disney, who eventually ejected them from Disney’s network before naming and shaming them despite having received help..
“We tried to hold off until we got deeper in, but our inside man got cold feet and kicked us out,” the group said.
Now, Disney has disclosed to employees that it is migrating from Slack to a number of “streamlined enterprise-wide collaboration tools”, according to CNBC.
It also said that by the end of Disney’s next financial quarter, most of its business units will have stopped using Slack.
Last year, the Rhysida ransomware gang published data it exfiltrated from Insomniac Games, largely relating to a new Wolverine game as well as the previously released Spider-Man 2, both of which are Disney-owned Marvel intellectual property.
Within the data were screenshots of the company’s Slack channels as well as development files from the games and business documents.
The files were uploaded in three parts, each linking to an online data catalogue. Looking through the first set of data alone reveals a wide selection of level design and character materials, and even design images and jpegs – all from the Wolverine game.
The leak also includes many files from Insomniac’s Spider-Man 2 video game, as well as internal HR documents such as I-9 employment forms and termination documents.
Internal screenshots of Insomniac’s Slack channels are included, and the contents of several employee PCs have also been published.
Of particular interest to gamers who are fans of the X-Men is a publishing agreement between Marvel and Sony Interactive Entertainment, signed by both Isaac Perlmutter, Marvel’s chairperson of entertainment, and Jim Ryan, Sony’s president. The document is effective as of 26 July 2021 and lists three upcoming X-Men games to be published under the agreement, the first being Wolverine and the rest as yet unnamed.