A California man has admitted to orchestrating a sophisticated cybersecurity attack against Disney that led to a massive data breach and ultimately prompted the entertainment giant to abandon Slack entirely. The case highlights how seemingly innocent AI-related software downloads can serve as vehicles for credential theft, resulting in significant corporate security compromises and legal consequences.
The hack details: Ryan Mitchell Kramer, a 25-year-old from Santa Clarita, pleaded guilty to hacking Disney’s company Slack channel and stealing 1.1 terabytes of confidential information.
- The stolen data included sensitive revenue figures for services like Disney+ and ESPN+, personal information of current and prospective employees, and login credentials for cloud infrastructure access.
- Kramer created malicious software disguised as an AI art generation tool and distributed it on platforms like GitHub in early 2024.
- The breach had significant operational impact, causing Disney to completely abandon Slack as a corporate communication tool last year.
How the attack worked: A Disney employee downloaded Kramer’s malicious program between April and May 2024, unknowingly installing software that stole their login credentials.
- The malware harvested both personal and work account passwords stored on the victim’s computer.
- After gaining access to Disney’s Slack environment, Kramer collected the massive data trove and attempted to monetize the breach.
- Court documents revealed at least two other victims also downloaded the malicious file, giving Kramer unauthorized access to their computers and accounts.
The extortion attempt: Kramer contacted the Disney employee through Discord, demanding payment to prevent the release of stolen corporate data and personal information.
- The hacker posed as part of a fictional Russian hacktivist group called “NullBulge” during his extortion attempts.
- Disney worked closely with law enforcement during the investigation, leading to Kramer’s identification and eventual guilty plea.
Legal consequences: Kramer now faces maximum penalties of 10 years imprisonment and $500,000 in fines for the cybercrime.
- A Disney spokesperson told SFGATE: “We are pleased that this individual has been charged and has agreed to plead guilty to federal charges.”
- The company emphasized its ongoing commitment to working with law enforcement to ensure cybercriminals face justice.
Recent Stories
DOE fusion roadmap targets 2030s commercial deployment as AI drives $9B investment
The Department of Energy has released a new roadmap targeting commercial-scale fusion power deployment by the mid-2030s, though the plan lacks specific funding commitments and relies on scientific breakthroughs that have eluded researchers for decades. The strategy emphasizes public-private partnerships and positions AI as both a research tool and motivation for developing fusion energy to meet data centers' growing electricity demands. The big picture: The DOE's roadmap aims to "deliver the public infrastructure that supports the fusion private sector scale up in the 2030s," but acknowledges it cannot commit to specific funding levels and remains subject to Congressional appropriations. Why...
Oct 17, 2025Tying it all together: Credo’s purple cables power the $4B AI data center boom
Credo, a Silicon Valley semiconductor company specializing in data center cables and chips, has seen its stock price more than double this year to $143.61, following a 245% surge in 2024. The company's signature purple cables, which cost between $300-$500 each, have become essential infrastructure for AI data centers, positioning Credo to capitalize on the trillion-dollar AI infrastructure expansion as hyperscalers like Amazon, Microsoft, and Elon Musk's xAI rapidly build out massive computing facilities. What you should know: Credo's active electrical cables (AECs) are becoming indispensable for connecting the massive GPU clusters required for AI training and inference. The company...
Oct 17, 2025Vatican launches Latin American AI network for human development
The Vatican hosted a two-day conference bringing together 50 global experts to explore how artificial intelligence can advance peace, social justice, and human development. The event launched the Latin American AI Network for Integral Human Development and established principles for ethical AI governance that prioritize human dignity over technological advancement. What you should know: The Pontifical Academy of Social Sciences, the Vatican's research body for social issues, organized the "Digital Rerum Novarum" conference on October 16-17, combining academic research with practical AI applications. Participants included leading experts from MIT, Microsoft, Columbia University, the UN, and major European institutions. The conference...