logo

Digital rampage saw ex-Disney employee remove nut allergy info from menus, dox co-workers, and more

ID: ec0e3ea8-332c-5448-a313-b1afe760d49f

STIX ID: report--ec0e3ea8-332c-5448-a313-b1afe760d49f

Feed Name: Malwarebytes Blog

Threat Score
60/100

Date Published: 2025-04-29

Date Updated: 2026-04-28

...
...

A former Disney menu production manager carried out an insider cyber sabotage campaign after termination: he accessed the internal menu creation system to falsely label items as allergy-safe (risking fatal consequences), altered QR codes and labels, changed fonts to break the system, tampered with prices, deployed a bot to lock at least 14 employee accounts, and amassed a dox folder of PII. Disney detected the changes before customer exposure; the attacker was arrested, pleaded guilty, received prison time and restitution, and the incident highlights failures in account deactivation and insider threat controls.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.