
A significant data breach at Disney earlier this summer has exposed a range of financial and strategic information, as well as personal data of staff and customers, according to files reviewed by The Wall Street Journal.
The leak, orchestrated by hackers, reportedly revealed detailed information such as passport numbers for Disney Cruise Line employees, Disney+ streaming revenue, and sales figures for the company's Genie+ theme park passes.
The data leak, comprising over a terabyte of information, is also said to include internal financial details about Disney's streaming services like Disney+ and ESPN+, and insights into its park pricing models.
Among the most notable revelations is the revenue from Genie+, a premium park pass that has generated more than $724 million in pretax revenue at Walt Disney (NYSE:DIS) World between October 2021 and June 2024, according to the WSJ.
Disney+ streaming revenue was also disclosed, with internal documents suggesting the service generated over $2.4 billion in revenue in the March quarter alone.
This accounted for about 43% of Disney's direct-to-consumer business, which also includes Hulu. While Disney doesn’t reveal revenue for individual streaming services within its direct-to-consumer business, the WSJ says the leak highlights the importance of Disney's streaming services, including Hulu.
The WSJ reported that personal data, including passport numbers and addresses for Disney Cruise Line employees and some customers, was also exposed. Additionally, staff reactions to the company's stance on Florida's Parental Rights in Education law were found in the leaked files.
The hackers, known as Nullbulge, uploaded the data to a decentralized file-sharing network in July, leaving it accessible to the public. Nullbulge claims to be a Russia-based hacktivist group, though some researchers believe it is the work of a lone individual in the U.S., said the WSJ.
Begin trading today! Create an account by completing our form
At One Financial Markets we are committed to safeguarding your privacy.
Please see our Privacy Policy for details about what information is collected from you and why it is collected. We do not sell your information or use it other than as described in the Policy.
Please note that it is in our legitimate business interest to send you certain marketing emails from time to time. However, if you would prefer not to receive these you can opt-out by ticking the box below.
Alternatively, you can use the unsubscribe link at the bottom of the Demo account confirmation email or any subsequent emails we send.
By completing the form and downloading the platform you agree with the use of your personal information as detailed in the Policy.