Disney Data Leak Reveals Disneyland Guest Info and Genie+ Revenue
A data leak that occurred earlier this summer compromised sensitive information from Disney. This included passport numbers of Disney Cruise Line crew members, contact details of guests from both Disney Cruise Line and Disneyland Resort, revenue data related to Genie+, and other confidential data.
Related – Walt Disney Company Faces Alleged Massive 1.1TB Data Breach
The Wall Street Journal (WSJ) analyzed some of the 1.1TB of data compromised by the Russia-based hacktivist group Nullbulge in July. Nullbulge accessed Disney’s internal Slack platform and, according to WSJ, shared over 44 million messages, 18,800 spreadsheets, and 13,000 PDFs.
Among the leaked files were detailed revenue figures for Disney+, ESPN+, and Hulu. While The Walt Disney Company doesn’t publicly disclose streaming service revenue, the spreadsheets suggest that Disney+ generated over $2.4 billion in the second quarter of 2024. This represents approximately 43% of the company’s direct-to-consumer entertainment revenue.
Another spreadsheet revealed revenue details from Disney Genie+, now called Lightning Lane Multi Pass. According to the leaked file, Genie+ at Walt Disney World generated over $724 million in pretax revenue between its launch in October 2021 and June 2024.
Additional data exposed information related to ad operations. This included political spending on Disney platforms and discussions about approving ad campaigns from competitors like Netflix.
One of the leaked spreadsheets contained the names and contact information of some Disneyland Resort guests with dining reservations. Another included personal details of Disney Cruise Line passengers, such as names, addresses, and phone numbers.
Passport numbers, visa details, places of birth, physical addresses, and current assignments of Disney Cruise Line staff members were also compromised in the data breach.
The leaked data included staff reactions to Disney’s conflict with Florida Governor Ron DeSantis over the Parental Rights in Education law (also known as the “Don’t Say Gay” law).
Slack is just one of the platforms Disney uses for internal communication, and no private messages between executives were part of the compromised data.
A Disney spokesperson stated, “We refuse to comment on unverified information that The Wall Street Journal allegedly acquired through illegal hacking activities.”
In an August regulatory filing, Disney informed investors that they were investigating the unauthorized release of data but that the incident had not affected and was unlikely to impact their operations or financial performance.
While Nullbulge uploaded the Disney data, security researchers believe the hack was carried out by a single individual based in the United States. Nullbulge claimed in a direct message on X that they accessed the data through a company manager of software development whose computer they compromised.
Let our friends at Destinations to Travel help you book your next Disney Vacation. They are the preferred Travel Agency of Chip and Company and Disney Addicts, and who we use ourselves.
Get started below for your FREE No Obligation Quote.
Book With our friends at Destinations to Travel
For the BEST in Disney, Universal, Dollywood, and SeaWorld Theme Park News, Entertainment, Merchandise & More follow us on, Facebook, Instagram, and Youtube. Don't forget to check out the Chip and Company Radio Network too!
