AI malware scam "destroys" Disney employee's life

A Disney engineer's life was devastated after unknowingly downloading malicious AI software, leading to a massive data breach and personal ruin. What happened Disney engineer Matthew Van Andel downloaded what he believed to be a legitimate AI tool for creating images from text prompts onto his personal computer from the GitHub code-sharing platform. However, the software contained malware-infected AI software, includ ing a keylogger, allowing hackers to see every keystroke Van Andel made . It also provided access t o his 1Password password manage ment account . Hacker group Nullbulge then contacted Van Andel via Discord, revealing they had accessed sensitive details about his personal and professional life. The situation escalated rapidly, resulting in: The release of 44 million Disney messages online, exposing private customer data, employee information and confidential company details. Publication of Van Andel's personal information, including his Social Security number, login credentials, and even his children's online gaming account details. Unauthorised charges on Van Andel's credit cards and attempts to access his private accounts. Van Andel's termination from Disney, loss of health insurance, and the forfeiture of approximately USD 200,000 in bonuses. Ongoing harassment, including unnerving voicemails from strangers and vandalism of his social media accounts. Why it happened Nullbulge aimed to expose Disney's internal communications and data due to its perceived misuse of AI and inappropriate handling of artist contracts. Van Andel's compromised device provided the hackers with the necessary access to Disney's systems. What it means Van Andel experienced evere personal and professional consequences, including losing his job, financial hardship, and ongoing privacy violations. In addition, Disney suffered a significant data breach, potentially damaging its reputation and exposing it to legal and financial risks. More broadly, the incident highlights the growing threat of AI-powered cyberattacks and the potential for seemingly innocuous software to cause widespread damage. System 🤖 Unknown Developer: Country: USA Sector: Media/entertainment/sports/arts Purpose: Defraud Technology: Machine learning Issue: Confidentiality ; Privacy; Security

Date it happened

2024-01-01

Organisation involved

Nullbulge

This is a record of what was reported, not a finding that anyone broke the law. If it names your organisation and you believe it is wrong, the corrections process is free and open to everyone.