The Walt Disney Company has reportedly decided to discontinue its use of the workplace communication platform Slack. This move follows a serious security breach earlier this year, which resulted in the exposure of over a terabyte of sensitive data, sparking concerns about Disney’s overall cybersecurity resilience.
In June, the hacktivist group “NullBulge” claimed responsibility for the breach, which revealed a vast amount of Disney’s confidential information.
Cybersecurity Risks Prompt Disney to Exit Slack?
According to Status News, Disney’s Chief Financial Officer, Hugh Johnston, confirmed that the entertainment giant is planning to phase out Slack across most of its divisions. Johnston shared this update in an email to employees, stating that the company aims to transition away from Slack by the end of the first quarter of fiscal year 2025.
“Our technology teams are overseeing the switch-off from Slack, with most businesses expected to complete the transition by Q1 FY25,” Johnston wrote. He added that some business units with “more complex use cases” may require additional time, but the full migration from Slack should be completed by the second quarter of 2025.
While Disney has begun adopting other enterprise-wide collaboration tools, the specifics of the new system have not yet been disclosed. Potential alternatives to Slack include Microsoft Teams, Google Chat, Webex, Mattermost, and others.
The Slack Hack that Exposed Disney’s Sensitive Data
The breach, which occurred in July 2024, was orchestrated by the cybercriminal group “NullBulge.” In a post on the dark web marketplace Breachforums, the group claimed responsibility for stealing sensitive data from Disney’s Slack channels. The breach reportedly exposed details of unannounced projects, raw images and code, login credentials, and internal links, among other sensitive data.
More than 44 million Slack messages were leaked, revealing extensive internal communications within Disney. The exposed data also included employee files, screenshots, personal pictures, and even private information like phone numbers.
NullBulge also revealed that they had an insider within Disney who assisted in the breach. However, their “inside man” reportedly withdrew from further cooperation, halting the flow of additional data. The hackers mentioned in a blog post, “We tried to dig deeper, but our inside contact got cold feet and cut us off.”
The leak also hinted at Disney’s plans to release a sequel to the 2021 video game Aliens: Fireteam Elite. The sequel, codenamed Project Macondo, is scheduled for a Q3 2025 release.
Disney acknowledged the breach in August, confirming that an investigation was underway to determine how over a terabyte of sensitive data had been leaked from one of its communication systems.
Slack: A Growing Target for Cyber Attacks?
Disney is not the first major corporation to suffer a breach via Slack. Over the past year, several high-profile companies have faced similar incidents.
For instance, in 2023, a threat actor gained access to Slack channels at MGM Resorts, one of the world’s largest casino and resort chains, and used the platform to launch a malware attack. By infiltrating Slack, the attacker spied on employees and gathered confidential data.
In late 2022, video game publisher Activision also fell victim to a Slack-related breach. Attackers gained access to the company’s Slack communications, revealing sensitive details about upcoming game releases.
Another notable incident involved ride-hailing giant Uber, whose internal Slack platform was breached in 2022. The hacker, protesting the company’s treatment of its drivers, left a message in Uber’s Slack forums after infiltrating its systems.
The Importance of Securing Third-Party Platforms
The recent Disney data breach underscores the need for organizations to scrutinize their third-party vendors and platforms more closely. While third-party tools like Slack can improve collaboration and efficiency, they also introduce new risks that must be managed.
Continuous monitoring of vendors’ cybersecurity practices is essential to ensure that their security protocols align with the organization’s standards. A proactive approach to vetting third-party platforms, coupled with frequent security assessments, can help mitigate the risk of future data breaches.
As the cyber threat landscape continues to evolve, companies must remain vigilant and prioritize the protection of their digital assets. Disney’s decision to part ways with Slack reflects a broader trend of organizations reassessing their relationships with external vendors in the wake of cybersecurity incidents.
Conclusion
The Disney data breach serves as a critical reminder of the potential vulnerabilities associated with third-party platforms. As businesses rely more on digital communication tools, the importance of maintaining robust cybersecurity measures cannot be overstated. Disney’s move to transition away from Slack highlights the increasing need for companies to prioritize security and adaptability in the face of growing cyber threats.
Discover more from Open Security Labs
Subscribe to get the latest posts sent to your email.
