ConfirmedArchive

Disney’s Slack breach, flagged by @vxunderground — confirmed; Disney left Slack

@vxunderground flagged the NullBulge claim on July 12, 2024. Disney later moved off Slack.

Leaked on 12 July 2024

Evidence tray card: Disney’s Slack breach, flagged by @vxunderground — confirmed; Disney left Slack

On July 12, 2024, @vxunderground posted that a threat actor called NullBulge claimed to have taken 1.1TiB of data from Disney’s Slack.

vx-underground @vxunderground
It's Friday - A Threat Actor operating under the moniker 'NullBulge' claims to have exfiltrated 1.1TiB of data from Disney's slack. Based on the information disclosed by the Threat Actor we suspect it is yet another victim of Infostealer malware. - AT&T filed an SEC 8K. In https://t.co/EaCu5auiic
540 likes · 86 reposts · counts as of 09 Nov 2026, 07:12 UTC
— vx-underground (@vxunderground) July 12, 2024

not in our leaker index

CNBC reported on Sept 19, 2024 that Disney’s Slack had been hacked in July, exposing more than a terabyte of company data, and that the company would stop using Slack for internal communication.

Confirmed that the breach happened and had consequences. Leakly does not link the data.

Sources

Status definitions · Corrections · Contact