Disney data leak: Personal data of guests and employees of Disneyland and Disney Cruise leaked

Over the summer, Disney's internal communications channels were breached. We now know that guests and employees were affected by this breach and hackers stole personal information.

At the beginning of the summer, a hacker group called “NullBulge” Get access to over 1 TB of sensitive Disney data after infiltrating the company's internal Slack channels. Now there is a new report through the Wall Street Journalthat viewed the leaked files has found out more about the exact contents of the stolen files.

The leak consists of more than 44 million messages found in Disney's Slack workplace channels, including around 18,800 spreadsheet files and 13,000 PDFs. The data leaked by the hackers was limited to files posted by Disney employees in a Disney Slack channel, with both private and public channels affected. Private direct messages between Disney employees in Slack are also not found in the leak.

The stolen data included some of Disney's internal corporate information and financial records, but the most disturbing details concern the private data of customers and employees of Disney theme parks and Disney Cruise Line.

Disney crew and guests doxxed

The Disney data leaked by hackers includes private information of Disney Cruise Line employees and guests, as well as theme park visitors.

The data stolen by the hackers included mailing addresses, birth dates, passport numbers, visa information and even current assignments of Disney Cruise Line crew members.

Another file contained names, addresses and phone numbers of Disney Cruise Line passengers.

Information about Disneyland guests was also discovered in the leaked data. It appears that the names and contact details of a “group” of Disneyland guests who had dining reservations at the park were exposed.

It is unclear exactly how many Disneyland and Disney Cruise Line guests and employees are affected.

Internal Disney streaming, theme park finances

The leak contains new financial information about Disney's streaming service Disney+.

According to internal tables found in the leaked data, Disney+ generated more than $2.4 billion in revenue in the second quarter of 2024.

While Disney makes its streaming financial information publicly available to investors, Wall Street Journal points out that Disney does not disclose exactly how much each of its individual streaming services – Disney+, Hulu and ESPN+ – contributes to that total. The leaked revenue data shows that Disney+ contributes 43 percent of the revenue of Disney’s direct-to-consumer entertainment business, according to the Wall Street Journal.

The leak also contains some very interesting financial details about Disney theme parks. Between October 2021 and June 2024, Disney's add-on theme park service Genie+ at Disney's Disney World resort complex in Orlando, Florida, generated over $724 million in revenue. Genie+ was a paid service that allowed Disney World guests to skip the front of the line at the theme park's attractions. Disney replaced Genie+ with a similar paid add-on service called Lightning Lane in July.

Mashable has reached out to Disney for comment and will update this post if we receive a response.