Disney’s Slack breach, flagged by @vxunderground — confirmed; Disney left Slack
@vxunderground flagged the NullBulge claim on July 12, 2024. Disney later moved off Slack.
Published · Leaked on

On July 12, 2024, @vxunderground posted that a threat actor called NullBulge claimed to have taken 1.1TiB of data from Disney’s Slack.
CNBC reported on Sept 19, 2024 that Disney’s Slack had been hacked in July, exposing more than a terabyte of company data, and that the company would stop using Slack for internal communication.
Confirmed that the breach happened and had consequences. Leakly does not link the data.
Sources & captured post
vx-underground @vxunderground
It's Friday - A Threat Actor operating under the moniker 'NullBulge' claims to have exfiltrated 1.1TiB of data from Disney's slack. Based on the information disclosed by the Threat Actor we suspect it is yet another victim of Infostealer malware. - AT&T filed an SEC 8K. In https://t.co/EaCu5auiic
540 likes · 86 reposts · counts as of
View the post on X · not in our leaker index