Man Pleads Guilty To Stealing 1.1 Terabytes of Disney's Slack Data

A 25-year-old from Santa Clarita has pleaded guilty to hacking a Disney employee's computer using malware disguised as an AI art tool, stealing over 1 terabyte of confidential Disney data and threatening to leak it under the guise of a fake Russian hacktivist group. Variety reports: Santa Clarita resident Ryan Mitchell Kramer, 25, pleaded guilty to two felony charges, including one count of accessing a computer and obtaining information and one count of threatening to damage a protected computer. Each charge carries a maximum sentence of five years in federal prison. According to the plea agreement, in early 2024 Kramer posted a computer program on various online platforms that appeared to be used to create AI-generated art, when it really contained a malicious file to gain access to victims' computers.

Between April and May 2024, a Disney employee downloaded the program, and Kramer gained access to the victim's personal and work accounts, including a non-public Disney Slack channel. Kramer dowloaded approximately 1.1 terabytes of confidential data from thousands of Disney Slack channels. In July, Kramer contacted the victim by pretending to be a member of a fake Russian hacktivist group called "Nullbulge" and threatened to leak their personal information and Disney Slack data. On July 12, Kramer publicly released the data, including the victim's bank, medical, and personal information on multiple online platforms.

Risks

[fluffernutter]

Amazing how many people lectured me that it was ok to use personal devices to log into work cloud stuff.

Re:Disney's WOKE FEMINIST ANTI-FAMILY movies Hacke

[quonset]

Every time you say woke, god creates another drag queen.

Disney's DEI Security Team

[Canberra1]

Another Cloudtrastophie. WE have no heards why 1) Used on a personal Laptop 2) Wide access, not needing a special account to see more 3) Employee Training (Sackable Offence) 4) Was that employee sacked if in the wrong? 5) Will SOUTHPARK do a follow up?

Re:Disney's WOKE FEMINIST ANTI-FAMILY movies Hacke

[drinkypoo]

Drag queens weren't a big deal until they joined in on the "family fun" of sexualizing children.

They've got nothing on white republican pastors. They're actually having sex with children.

Re: Disney's WOKE FEMINIST ANTI-FAMILY movies Hack

[fluffernutter]

There is a big difference between sexualizing children and acknowledging that children have a gender that they are growing curious about at that age.

Re:

[ToasterMonkey]

Kids just see people in costumes, it's great for them, everyone is different, and they get a story.

But you... If a man reading a book to you dressed as a clown with boobs turns you on unexpectedly, you may want to try asking yourself some deeper questions. I like sexy librarian/teacher types but I can let a woman read my kids a book without drooling, or hating myself and blaming her. So if you like dudes in costumes, don't blame them.

Re:

[Ol Olsoc]

Every time you say woke, god creates another drag queen.

And RuPaul thanks you.

Re:

[rabbirta]

Reading through your posts, I can't tell if it's a bit. You don't work in tech anymore right?

Best part of the story not mentioned

[zawarski]

How did they catch him? I mean besides being a dumbass. I'm asking for a friend.

Re:

[timholman]

How did they catch him? I mean besides being a dumbass. I'm asking for a friend.

Your mistake is thinking, "If I avoid doing what that other guy did, I won't be caught." Give the FBI a good enough reason to catch you, and they will.

The FBI absolutely has the people and resources to find someone who lives in the U.S. Their experts have tricks they won't talk about. What they lack is the bandwidth to handle every single case. Their agents have to pick and choose, and attacking a major corporation like Disn

Re:

[stabiesoft]

Absolutely this. Consider a common purse snatch and what are the odds anything happens, unless LEO is motivated. https://apnews.com/article/kri... [apnews.com] Then expect action within days. We mere mortals, not so much. I've read multiple stories of mere mortals who have tracked a stolen phone to an address and still LEO declines action.

Re: Best part of the story not mentioned

[zawarski]

Ug. I can't help thinking she's hot. I feel dirty.

Re:

[jacks smirking reven]

Let's be real if she wasn't attractive she wouldn't have her current job (despite all the obvious work she's had done to achieve "the look" Dear Leader enjoys).

Meritocracy baby!

Re:

[stabiesoft]

Interesting, I see Latina when I see her and the dicktator normally likes blonds. I had to look though, she is from SD, so unlikely latina. So I guess she'd get a checkmark since she is not technically brown.

Re:

[test321]

He modified code on github and later contacted the victim, so there're a bunch of IPs. We don't have to think very far. He probably didn't use a VPN, or the VPN cooperated.

So I wonder what Kramer really wanted?

[timholman]

In July, Kramer contacted the victim by pretending to be a member of a fake Russian hacktivist group called "Nullbulge" and threatened to leak their personal information and Disney Slack data.

Supposedly "Nullbulge" did the hack as a protest against AI-generated artwork, for the protection of artists' rights everywhere.

Now that it turns out that Nullbulge was just one guy, I'm curious exactly what it was he really demanded from his victims. Cryptocurrency? "Nullbulge" claimed to be anti-crypto, so that wou

Give It Up

[AndrewZX]

This is just another example of why criminal hacking doesn't pay. I gave it up, you should too.