[Security](https://leakly.com/security/)

[Confirmed][Archive]

# Disney’s Slack breach, flagged by @vxunderground — confirmed; Disney left Slack

@vxunderground flagged the NullBulge claim on July 12, 2024. Disney later moved off Slack.

Leaked on 12 July 2024

![Evidence tray card: Disney’s Slack breach, flagged by @vxunderground — confirmed; Disney left Slack](https://leakly.com/assets/og/disney-slack-breach.png)

On July 12, 2024, @vxunderground posted that a threat actor called NullBulge claimed to have taken 1.1TiB of data from Disney’s Slack.

> **vx-underground** @vxunderground
>
> It's Friday
> - A Threat Actor operating under the moniker 'NullBulge' claims to have exfiltrated 1.1TiB of data from Disney's slack. Based on the information disclosed by the Threat Actor we suspect it is yet another victim of Infostealer malware.
> - AT&T filed an SEC 8K. In https://t.co/EaCu5auiic
>
> 540 likes · 86 reposts · counts as of 09 Nov 2026, 07:12 UTC
>
> — vx-underground (@vxunderground) [July 12, 2024](https://twitter.com/vxunderground/status/1811783405127749647)

not in our leaker index

[CNBC](https://www.cnbc.com/2024/09/19/disney-to-ditch-slack-after-july-data-breach-.html) reported on Sept 19, 2024 that Disney’s Slack had been hacked in July, exposing more than a terabyte of company data, and that the company would stop using Slack for internal communication.

Confirmed that the breach happened and had consequences. Leakly does not link the data.

[Confirmed]

## What happened later

Confirmed.

## Sources

* [Original X post by @vxunderground](https://x.com/vxunderground/status/1811783405127749647)
* [CNBC — Disney to ditch Slack after July data breach](https://www.cnbc.com/2024/09/19/disney-to-ditch-slack-after-july-data-breach-.html)

[Status definitions](https://leakly.com/editorial-guidelines/#status) · [Corrections](https://leakly.com/corrections/) · [Contact](https://leakly.com/contact/)