Nullbulge, an anonymous hacktivist group, has taken responsibility for seizing and leaking 1.1 terabytes of data from Disney’s Slack channels. The stolen data includes messages, files, images, code, logins, internal webpage links, visitor numbers and revenue for Disneyland Paris, and documents on unreleased projects. The group states that its hacks are aimed at punishing those who misuse artists' work, not causing malice.
The rise of A.I. tools like OpenAI’s DALL-E and Sora has sparked concerns among artists about their copyrighted work being used without consent to train these systems. While some artists have pursued legal action, others, frustrated by outdated copyright laws, have turned to more direct methods like those employed by Nullbulge.
The Hack and Data Leak
Nullbulge claims it targeted Disney due to its handling of artist contracts, its approach to A.I., and its perceived disregard for consumer rights. The group did not attempt to negotiate with Disney before leaking the data on BitTorrent last Friday. The Wall Street Journal, which first reported the hack, viewed some of the leaked data, including internal discussions on job candidates and software development plans dating back to 2019.
Nullbulge detailed in a blog post that it twice compromised the computer of a Disney software development manager using malware. The group accessed the manager's computer after he downloaded a corrupted tool and despite his efforts to remove them, they regained access.
Reaction and Investigation
Disney has yet to publicly comment on the incident but told the Wall Street Journal that it is investigating the hack. The leak has raised significant concerns about cybersecurity and the ongoing debate over the use of A.I. in creative industries.
Protecting Artists' Rights
Nullbulge describes itself as a group committed to protecting artists' rights and ensuring fair compensation for their work. It previously compromised an interface for the A.I. image generator Stable Diffusion to steal logins, reinforcing its stance against what it views as the exploitation of artists by A.I. technologies.
As A.I. continues to evolve, the conflict between technology and copyright law is expected to intensify. The actions of groups like Nullbulge highlight the urgent need for updated legal frameworks that address the challenges posed by A.I. while balancing the rights and interests of artists and technologists.
This hack underscores the complex and often contentious relationship between traditional creative industries and emerging A.I. technologies, and it serves as a stark reminder of the lengths some will go to in order to protect artistic integrity and rights in the digital age.