Disney’s internal Slack messaging data leaked in hack

• Disney is the latest major company to have its data leaked online.
• Hacker group Nullbulge said it had published internal Slack information from “nearly 10,000 channels.”
• For weeks, an X account had been warning the company that it had been hacked and that a leak was coming.

An apparent leak has made public messages, files, code and other data from Disney’s internal Slack.

A hacking group known as Nullbulge claimed responsibility for the leak in a blog post, explaining that users could obtain details about Disney’s planned projects, login information and more, all retrieved from the company’s Slack messaging system.

Nullbulge said it accessed “nearly 10,000 channels” to disseminate “every message and file possible.” The group remains anonymous but said its mission includes defending artists’ rights, the Wall Street Journal reported. Business Insider was unable to verify Nullbulge’s claims about the extent of the hack.

Disney’s artist contracts, “AI approach” and “blatant disregard for the consumer” motivated the group to target the entertainment company, the Journal said.

The X account @NullBulgeGroup has spent weeks posting about infiltrating Disney’s Slack. One post from July 4 appears to show a dashboard with daily attendance at Disneyland Paris.

A Disney spokesperson told BI the company is investigating the matter.

Disney is the latest major company to suffer a data breach last week. On Friday, AT&T said hackers stole “nearly all” of its customers’ call and message records.

An unidentified Nullbulge spokesperson gave the Journal some insight into why hackers might leak data first and ask questions later.

“If we said, ‘Hello Disney, we have all your Slack data,’ they would instantly crash the system and try to eliminate us. In a dogfight, it’s best to shoot first,” the spokesperson said.