Powered by MOMENTUM MEDIA
cyber daily logo
Breaking news and updates daily. Subscribe to our Newsletter

Disney abandons Slack following unfinished project data leak

In light of the major data breach it suffered in July, Disney has announced that it is moving away from the cloud-based team communication platform Slack.

user icon Daniel Croft
Mon, 23 Sep 2024
Disney abandons Slack following unfinished project data leak
expand image

In July, threat actors from a group called NullBulge announced on X (formerly Twitter) that it had stolen over a terabyte of Disney’s internal development Slack channel.

“1.1TiB of files and chat messages. Anything we could get our hands on, we downloaded and packaged up. Want to see what goes on behind the doors? go grab it,” the group said.

The group posted a link to the alleged stolen data, which it claims contains “unreleased projects, raw images and code, some logins, links to internal api/web pages, and more”.

============
============

The group also claims to have had an inside man at Disney, who eventually ejected them from Disney’s network before naming and shaming them despite having received help..

“We tried to hold off until we got deeper in, but our inside man got cold feet and kicked us out,” the group said.

Now, Disney has disclosed to employees that it is migrating from Slack to a number of “streamlined enterprise-wide collaboration tools”, according to CNBC.

It also said that by the end of Disney’s next financial quarter, most of its business units will have stopped using Slack.

Last year, the Rhysida ransomware gang published data it exfiltrated from Insomniac Games, largely relating to a new Wolverine game as well as the previously released Spider-Man 2, both of which are Disney-owned Marvel intellectual property.

Within the data were screenshots of the company’s Slack channels as well as development files from the games and business documents.

The files were uploaded in three parts, each linking to an online data catalogue. Looking through the first set of data alone reveals a wide selection of level design and character materials, and even design images and jpegs – all from the Wolverine game.

The leak also includes many files from Insomniac’s Spider-Man 2 video game, as well as internal HR documents such as I-9 employment forms and termination documents.

Internal screenshots of Insomniac’s Slack channels are included, and the contents of several employee PCs have also been published.

Of particular interest to gamers who are fans of the X-Men is a publishing agreement between Marvel and Sony Interactive Entertainment, signed by both Isaac Perlmutter, Marvel’s chairperson of entertainment, and Jim Ryan, Sony’s president. The document is effective as of 26 July 2021 and lists three upcoming X-Men games to be published under the agreement, the first being Wolverine and the rest as yet unnamed.

Daniel Croft

Daniel Croft

Born in the heart of Western Sydney, Daniel Croft is a passionate journalist with an understanding for and experience writing in the technology space. Having studied at Macquarie University, he joined Momentum Media in 2022, writing across a number of publications including Australian Aviation, Cyber Security Connect and Defence Connect. Outside of writing, Daniel has a keen interest in music, and spends his time playing in bands around Sydney.

newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.