Skip to content

Back to the record

Jul 11, 2024Confirmed

NullBulge's AI-Powered Malware Allegedly Compromises Disney Employee and Internal Data

Rogue: Caused harmAI loose in the worldInjectionDERIVED

Approved by person, Oct 11, 2026. How entries are approved

Showing full summaries.

A Disney employee, Matthew Van Andel, reportedly downloaded AI-powered malware allegedly developed by the cybercriminal group NullBulge, resulting in a major cybersecurity breach. Hackers purportedly accessed Disney's Slack system, exposing 44 million internal messages, employee and customer data, and financial records. NullBulge also reportedly leaked Van Andel’s personal financial information, leading to identity theft and his eventual termination.

What this means for youA Disney employee's device was reportedly infected with malware, leading to exposed internal messages and personal financial data. For households and small businesses, avoid downloading AI tools or 'AI-powered' software from unknown sources, and check that work devices run current security software before installing anything new.

Sources

Data from the AI Incident Database (incidentdatabase.ai), licensed CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. IAAI-21.

Source data license: CC BY-SA 4.0 (database). Report contents keep their own rights; reports.text, submissions, images and videos are excluded from the data license.

rogue:R4

Covered by snapshot 45

da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a

This entry is record number 2027. It has not been edited since it was approved; the hash above would not match if it had. How to verify

NullBulge's AI-Powered Malware Allegedly Compromises Disney Employee and Internal Data | Vigilo AI Watch