A California resident has pleaded guilty to charges related to hacking a Disney employee’s personal computer, resulting in the theft of more than 1 terabyte of confidential data. Last year, it was reported that a hacker accessed Disney’s files and released data online, including financial statements on Genie+, Disney+, and more.
Ryan Mitchell Kramer, 25, of Santa Clarita, admitted to two felony charges—one count of unauthorized computer access to obtain information and another of threatening damage to a protected computer. Each charge carries a potential maximum sentence of five years in federal prison.
According to the plea agreement, Kramer distributed malicious software disguised as an AI-generated art program on various online platforms in early 2024.
When a Disney employee unknowingly downloaded this software between April and May, Kramer gained access to both the victim’s personal and professional accounts, including sensitive Disney Slack channels.
Kramer subsequently downloaded approximately 1.1 terabytes of confidential data from thousands of Disney Slack channels.
In July 2024, he posed as a member of a fictional Russian hacktivist group called “Nullbulge” and threatened the victim with leaking their personal information along with Disney-related data. On July 12, Kramer publicly shared the compromised information, which included personal, banking, and medical details, on several online platforms.
The guest and employee information leak led to a class action lawsuit claim last October.
The Wall Street Journal reported details of the hack on July 15, prompting Disney to confirm they were actively investigating the breach, alongside the FBI.
The leaked files included internal conversations about Disney’s corporate website management, software development, employment candidate assessments, programs for ESPN emerging leaders, and even photos of employees’ pets, with information dating back to at least 2019.
A Disney spokesperson issued a statement saying,
“We are pleased that this individual has been charged and has agreed to plead guilty to federal charges. We remain committed to working closely with law enforcement, as we did in this case, to ensure cybercriminals are brought to justice.”
Kramer further acknowledged hacking at least two other individuals through the malicious software. He is scheduled for his initial court appearance at the United States District Court in downtown Los Angeles in the coming weeks.
The plea agreement lists several digital restrictions for Kramer in the future, both in and out of prison.
Stay tuned for further updates as this story develops.
Source: Variety
Pirates & Princesses (TM) (Stylized as PNP) is an independent, opinionated News and Information site focused on Travel, Entertainment, Fashion, the “Geek Girl” Lifestyle, and more. We focus heavily on Walt Disney World, Disneyland, Universal Orlando Resort, and other themed entertainment and travel destinations. Our news staff includes former theme park and entertainment industry employees, journalists and dedicated pop culture and theme park enthusiasts. Opinions expressed by contributors do not necessarily reflect the views of this site, our affiliates or our sponsors.