Disney Data Breach: Man Admits Guilt in Massive 1.1 TB Slack Theft

A California man has confessed to hacking into a Disney employee’s computer and stealing over 1 terabyte of sensitive information. Ryan Mitchell Kramer, 25, from Santa Clarita, pleaded guilty to two serious felonies: accessing a computer without authorization and threatening to damage protected systems. Each charge could lead to up to five years in federal prison.

In early 2024, Kramer released a seemingly harmless program designed for creating AI-generated art on different online platforms. However, this program contained malware that allowed him to breach victims’ computers.

After a Disney employee unknowingly downloaded this program, Kramer accessed both personal and work-related accounts, including private Disney Slack channels. He stole around 1.1 terabytes of confidential data, which included information about internal communications and even personal details of employees. In July, he posed as a member of a fake Russian hacktivist group called “Nullbulge” and threatened to leak the stolen information. On July 12, he followed through, publishing sensitive data on various online platforms.

The hack gained widespread attention when the Wall Street Journal reported it on July 15. Disney confirmed they were investigating the incident, and the FBI has also become involved.

The leaked files included everything from conversations about the company’s website maintenance to software development, evaluations of job candidates, and even cute pictures of employees’ dogs. Notably, some of this data dated back to 2019.

A Disney spokesperson expressed relief that Kramer was charged, stating their commitment to collaboration with law enforcement to prevent cybercrime.

Interestingly, Kramer admitted to hacking at least two other victims using similar malware tactics. He is scheduled to appear in U.S. District Court in Los Angeles soon.

This case highlights the growing threat of cybercrime, which is increasingly relevant in today’s digital landscape. According to recent reports, cyberattacks on corporations surged by 38% in 2022 alone, making it crucial for companies to invest in robust security measures.

With more people working remotely, the need for secure digital environments has never been greater. Companies like Disney are now taking extra steps to protect sensitive information, including employee training on recognizing potential threats and implementing advanced security protocols.

For more on the importance of cybersecurity, you can check resources from the Cybersecurity and Infrastructure Security Agency (CISA) here.

Check out this related article: Discovering Marie-Antoine Carême: The Culinary Legend Behind the New Apple TV+ Series