The Walt Disney Company is now at the center of a large class action lawsuit after a significant data breach exposed over 1.1 terabytes of personal information from its customers. The lawsuit, filed in Los Angeles Superior Court on October 3, accuses Disney of failing to protect sensitive data, and thousands of customers have joined the suit.
In July 2024, the hacktivist group “Nullbulge,” based in Russia, accessed Disney’s internal communication system, Slack, and obtained a wide range of personal data, including passport numbers from Disney Cruise Line employees. Additionally, revenue information from Disney+, ESPN+ and Hulu was stolen.
Disney customers have expressed concerns that they have not been fully informed about the extent of the breach. Many claim that the company has kept them in the dark, leaving them unsure about how much of their personal information was taken.
The Hollywood Reporter noted that the breach included internal communications, images and logins, much of which came from the Slack system. This has raised questions about the security of Disney’s internal communications and how the breach was allowed to happen.
This lawsuit comes at a challenging time for Disney, which has been dealing with internal financial issues, including rounds of layoffs and declining revenue from its theme parks. The company’s stock has been downgraded as a result of these ongoing struggles.
The class action lawsuit could lead to significant legal and financial consequences for Disney as it works to address the fallout from the data breach.
