The Walt Disney Company is reportedly leaving Slack in the wake of a July data breach that exposed over 1TB of confidential messages and files on the company's internal communication channels.
As reported by CNBC, Disney has already started the transition to new "streamlined enterprise-wide collaboration tools". Employees were informed via email this week that the migration is expected to be completed by the end of the company's next fiscal quarter.
This decision follows a massive data breach in July, where a threat actor named 'NullBulge' infiltrated Disney's Slack platform and stole 1.1TB of data. The threat actor claimed to have stolen all messages and files from nearly 10,000 Slack channels, including details of upcoming projects, financial information, IT data, and other confidential information.
Disney had already suffered another data breach a month prior, when 2.5GB of Club Penguin and corporate data was leaked from the company’s Confluence server onto the 4chan message board.
It remains unclear how Disney employees will communicate following the move away from Slack, and whether the company will transition to another enterprise platform, such as Microsoft Teams, or develop their own internal software.
Communication platforms like Slack are often targeted by threat actors looking to steal confidential files and taunt their victims. For instance, in 2022, the Lapsus$ hacking group infiltrated Uber's Slack server using stolen employee credentials and taunted employees about the breach. Similarly, in August 2023, threat actors breached Activision's Slack server, stealing employee data and information about upcoming games.