The Walt Disney Company is being sued in a class action lawsuit after a massive data breach in July 2024 compromised more than 1.1 terabytes of customer data. Thousands of customers have joined the lawsuit, filed by Scott Margel in Los Angeles Superior Court on October 3, accusing Disney of failing to protect their sensitive information.
The data breach, orchestrated by the Russia-based hacktivist group “Nullbulge,” exposed a wide range of personal details, including passport numbers of Disney Cruise Line employees and financial information tied to Disney’s streaming services. The hackers gained access through Disney’s Slack system, used internally for communication among employees.
Disney has been criticized for its lack of transparency, with many customers claiming they have not been informed about the full extent of the breach. This has fueled frustration and uncertainty among those affected, who are demanding answers about how much of their data was stolen.
The breach also revealed sensitive internal documents related to Disney+, ESPN+ and Hulu, along with other proprietary information, according to reports from The Wall Street Journal and The Hollywood Reporter. Much of the data appears to have originated from the company’s use of the Slack platform, which has raised concerns about the security of Disney’s internal systems.
This lawsuit is just one of the challenges Disney is currently facing. The company has been struggling with financial losses, leading to rounds of layoffs and restructuring. Revenue from Disney’s theme parks and streaming services has been declining, prompting a downgrade in Disney’s stock.
As the class action lawsuit moves forward, Disney will be dealing with both the legal ramifications and the ongoing reputational damage from the breach.