PrivacyHigh
NullBulge's AI-Powered Malware Allegedly Compromises Disney Employee and Internal Data
- Occurred
- Jul 11, 2024
- Published
- Jul 16, 2024
- Source
- AI Incident Database
Summary
A Disney employee, Matthew Van Andel, reportedly downloaded AI-powered malware allegedly developed by the cybercriminal group NullBulge, resulting in a major cybersecurity breach. Hackers purportedly accessed Disney's Slack system, exposing 44 million internal messages, employee and customer data, and financial records. NullBulge also reportedly leaked Van Andel’s personal financial information, leading to identity theft and his eventual termination.
Developers
- NullBulge
Deployers
- NullBulge
Harmed parties
- Matthew Van Andel
- Disney employees
- Disney
Tags
- Malware
- Cybersecurity breach
- Credential theft
- Identity theft
- Password manager breach
- Disney
- Phishing
- Social engineering
- GitHub
- Corporate espionage
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Unauthorized data breach exposing 44 million messages and personal data constitutes a major privacy violation with significant harm.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8