Fake AI art tool infected a Disney employee; 1.1 TB of Slack data was stolen
In early 2024 a man posted a program on GitHub and other sites that claimed to make AI-generated art but carried a malicious file. A Disney employee installed it in April or May 2024, giving him the employee's stored credentials and access to non-public Disney Slack channels, and he downloaded about 1.1 TB. Posing as a fake hacktivist group, he leaked the files on July 12, 2024. He agreed to plead guilty to federal charges in May 2025.
Sources
- Primary: https://www.justice.gov/usao-cdca/pr/santa-clarita-man-agrees-plead-guilty-hacking-disney-employees-computer-downloading
- Upstream: Editorial
- Entered by the cybermap.lol editors, with sources on the entry
Defenses for this class of incident
all categoriesA data breach sits in these classes of the AI-security landscape. The companies below work on that class of problem. This is a taxonomy, not a claim that any of them would have changed this incident.
Vendor data: AI Security Startups Map by Prompt Security (CC BY 4.0), synced daily. startups.prompt.security. Paid placements are labelled Sponsored; HeimWall, which runs this site, is labelled Operator. 453 companies in the directory.
Wrong or missing? Email founders@heimwall.ai. Corrections are logged here, in place. How corrections and takedowns work.