Disney Data Breach Overview

A significant data breach at Disney earlier this summer exposed a range of financial, strategic, and personal information regarding staff and customers, as reported by The Wall Street Journal.

Details of the Breach

The breach, orchestrated by hackers, revealed:
– Passport numbers for Disney Cruise Line employees
– Streaming revenue from Disney+
– Sales figures for Genie+ theme park passes

This data leak, comprising over a terabyte of information, also contained internal financial details about Disney’s streaming services, including Disney+ and ESPN+, as well as insights into park pricing models.

Key Revelations

Among the notable findings:
– Genie+ generated over $724 million in pretax revenue at Walt Disney World from October 2021 to June 2024.
– Disney+ streaming revenue was over $2.4 billion in the March quarter, making up about 43% of Disney’s direct-to-consumer business, including Hulu.

The leaked documents also exposed personal data, such as passport numbers and addresses for Disney Cruise Line employees and customers. Furthermore, staff opinions regarding the company’s stance on Florida’s Parental Rights in Education law were included.

Hacker Group Involved

The hackers, known as Nullbulge, uploaded the data to a decentralized file-sharing network in July, making it publicly accessible. Nullbulge claims to be a Russia-based hacktivist group, though some believe it may be an individual from the U.S.