OPINION | This article contains opinion. This site is licensed to publish this content.
The Walt Disney Corporation is in hot water following a major data breach. Hackers compromised more than 1.1TB of customers’ “highly sensitive personal information” during the breach, leading to legal action against the media empire.
A class action lawsuit, filed on October 3 in Los Angeles, alleges that Disney failed to protect sensitive information and did not inform customers about the breach’s extent.
The breach was executed by the Russian hacktivist group “Nullbulge.”
Nullbulge allegedly accessed Disney’s internal communications platform, Slack, leading to the theft of personal and internal data.
Plaintiff Scott Margel is seeking improvements in Disney’s security measures, transparency about the breach, and unspecified damages.
“[They] remain, even today, in the dark regarding which particular data was stolen, the particular malware used, and what steps are being taken, if any, to secure their [personal information] going forward,” the complaint stated.