In a significant cybercrime case, Ryan Mitchell Kramer, a 25-year-old from Santa Clarita, California, pleaded guilty to federal charges for hacking into a Disney employee’s personal computer and stealing over 1.1 terabytes of sensitive company data. The data breach, which occurred between April and May 2024, exposed a vast array of internal communications and confidential information.
The Cyberattack Unveiled
Kramer’s attack began when he distributed a malicious file disguised as an AI art program on platforms like GitHub. When downloaded, the file granted him unauthorized access to users’ systems. One of the victims was a Disney employee who unknowingly installed the malware. This allowed Kramer to infiltrate the employee’s computer, obtaining credentials that led him to access thousands of internal Disney Slack channels. Between April and May 2024, he downloaded approximately 1.1 terabytes of confidential data.
The Data Dump
In July 2024, Kramer posed as part of a fictitious Russian hacktivist group named “Nullbulge,” threatening to leak the stolen information. After receiving no response, he released the data online, including:
- 44 million Slack messages
- Private customer information
- Employee passport data
- Theme park and streaming revenue numbers
- Internal business discussions
The leak also contained conversations about maintaining Disney’s company website, software development, job applicants, and even personal photos of employees’ pets dating back to 2019.
Legal Consequences
Kramer pleaded guilty to two felony charges: obtaining information from an unlawfully accessed computer and threatening to damage a protected computer. He faces up to 10 years in federal prison. Additionally, he admitted to hacking the computers and accounts of two other individuals who downloaded his malicious file. An FBI investigation is ongoing, and Kramer is scheduled to appear in federal court in Los Angeles in the coming weeks .
Disney’s Response
Disney has expressed its commitment to combating cybercrime and working closely with law enforcement. A company spokesperson stated, “We are pleased that this individual has been charged and has agreed to plead guilty to federal charges. We remain committed to working closely with law enforcement, as … “.
Broader Implications
This incident highlights the vulnerabilities associated with workplace collaboration tools and the importance of cybersecurity measures. The breach has raised concerns about the security of platforms like Slack, which are widely used for internal communications in many organizations. It underscores the need for robust security protocols and employee awareness to prevent such cyberattacks in the future.
As the FBI continues its investigation, the case serves as a stark reminder of the potential consequences of cybercrime and the importance of safeguarding sensitive information in the digital age.
