[Security](https://leakly.com/security/)

[Confirmed][Archive]

# Disney’s Slack breach, flagged by @vxunderground — confirmed; Disney left Slack

@vxunderground flagged the NullBulge claim on July 12, 2024. Disney later moved off Slack.

Published 09 Nov 2026, 09:08 UTC · Leaked on 12 Jul 2024, 15:23 UTC

Leaked on 12 July 2024

![Evidence tray card: Disney’s Slack breach, flagged by @vxunderground — confirmed; Disney left Slack](https://leakly.com/assets/og/disney-slack-breach.png)

On July 12, 2024, @vxunderground posted that a threat actor called NullBulge claimed to have taken 1.1TiB of data from Disney’s Slack.

CNBC reported on Sept 19, 2024 that Disney’s Slack had been hacked in July, exposing more than a terabyte of company data, and that the company would stop using Slack for internal communication.

Confirmed that the breach happened and had consequences. Leakly does not link the data.

[Confirmed]

## What happened later

Confirmed.

## Sources & captured post

> **vx-underground** @vxunderground
>
> It's Friday
> - A Threat Actor operating under the moniker 'NullBulge' claims to have exfiltrated 1.1TiB of data from Disney's slack. Based on the information disclosed by the Threat Actor we suspect it is yet another victim of Infostealer malware.
> - AT&T filed an SEC 8K. In https://t.co/EaCu5auiic
>
> 540 likes · 86 reposts · counts as of 09 Nov 2026, 07:12 UTC
>
> [View the post on X](https://x.com/vxunderground/status/1811783405127749647) · not in our leaker index

### Original source & corroborating coverage

* [Original X post by @vxunderground](https://x.com/vxunderground/status/1811783405127749647)
* [CNBC — Disney to ditch Slack after July data breach](https://www.cnbc.com/2024/09/19/disney-to-ditch-slack-after-july-data-breach-.html)

[Status definitions](https://leakly.com/editorial-guidelines/#status) · [Corrections](https://leakly.com/corrections/) · [Contact](https://leakly.com/contact/)