Disney Suffers Major Data Breach, Private Information Leaked

More information has been revealed bout Disney’s massive data leak.

Related: Disney Replaces Free Streaming With New 24/7 Junior Channel

Earlier this year, Russian hacker group Nullbulge attacked The Walt Disney Company, successfully obtaining hundreds of documents, internal files, and other, private information. Over a terabyte of information was compromised and leaked, with The Wall Street Journal confirming some rather shocking figures.

According to a new report, over 44 million messages were taken by Nullbulge, as well as over 18,000 spreadsheets and 13,000 PDFs.

Not only were internal documents leaked, but significant financial details were obtained as well, with information being shared online regarding Disney’s streaming division, including Disney+, ESPN+, and Hulu. The Walt Disney Company does not disclose its streaming service revenue publicly, but spreadsheets show Disney+ generated over $2.4 billion during the second quarter of 2024.

Related: Disney Theme Park Systems Crash Country-Wide, Travelers Issued Warning

Specific numbers regarding revenue within the company’s theme parks were also revealed, giving insight into how popular Disney’s controversial Genie+ system truly was.

Disney overhauled its Genie+ system earlier this summer, giving it a new look and a new name. Now called Lightning Lane Multi Pass, this line-skipping tool essentially works the same as Disney Genie+, with a few tweaks and changes.

In the past, Disney has stated Genie+ was a consistent money-maker for the company. However, the new data leak reveals exact numbers when it comes to Genie+ revenue at Disneyland and Walt Disney World Resorts.

Between its launch in October 2021 and June 2024, Genie+ generated over $720 million in pretax revenue for The Walt Disney Company.

The data leak also includes names and contact information for Disneyland Resort guests. This is limited to guests who had made dining reservations.

Other details included in the leak are names, addresses, and phone numbers of Disney Cruise Line passengers. Visa card details, places of birth, and passport numbers of Disney Cruise Line staff were also leaked.

Related: Forget the Parks, $150 “Once-in-a-Lifetime” Experience Coming to Disney Springs

Disney told investors the company would be investigating the unauthorized release of data, but stated the incident would likely have no effect on operations or financial performance.

While these numbers were distributed by The Wall Street journey, they may still not be entirely accurate.

In August, a Disney spokesperson stated, “We decline to comment on unverified information The Wall Street Journal has purportedly obtained as a result of a bad actor’s illegal activity.”

It’s believed the hack was done by a single individual, with the information being uploaded by Nullbulge. More information regarding the attack is likely to be released in the coming months.

Stay tuned here at us for all future updates on The Walt Disney Company.