Disney investigating reported hack of internal Slack messages by Nullbulge group

Disney confirmed on Monday that it is investigating a reported cyberattack on its internal Slack workplace messaging system. The hack, allegedly carried out by a group called Nullbulge, is said to have compromised thousands of Slack channels and exposed sensitive information, including unreleased projects, raw images, code, login credentials, and links to internal pages.

Nullbulge, on their website, boasts of having hacked “almost 10,000 channels, every message and file possible.” While the full extent of the breach has not been verified, the Wall Street Journal reviewed some of the leaked material, which dated back to 2019 and included discussions on various topics ranging from website maintenance to employee assessments and photos.

The group claims to have targeted Disney due to concerns about the company’s handling of artist contracts, its approach to AI, and its “blatant disregard for the consumer.” They have also issued a warning to individuals to safeguard their personal information.

This incident is reminiscent of the devastating cyberattack on Sony Pictures in 2014, which caused widespread disruption and the public release of confidential emails.

Disney has assured that they are investigating the matter and will take necessary actions to address the situation.