Leak at Disneyland

On 21 June 2025, Disneyland Paris — the Marne-la-Vallée resort and theme-park complex operated by Euro Disney — was named on the leak site of the Anubis ransomware gang, which claimed to hold roughly 64GB of stolen data and billed it as "the largest data leak in the history of Disneyland Park."

According to the attackers, the haul comprised about 39,000 confidential files tied to the construction and renovation of the resort. Rather than guest or employee records, the trove was dominated by engineering documents and internal media covering existing and upcoming attractions — including Pirates of the Caribbean, Big Thunder Mountain, Crush's Coaster, Phantom Manor, Ratatouille, Buzz Lightyear and the planned Frozen-themed land.

Anubis said the data was not taken directly from Disneyland's own systems but obtained "during the leak of data of the partner company," indicating the compromise originated with a third-party contractor or supplier rather than the resort itself.

Exposed data categories (per the attackers' claims):

• Construction and renovation engineering plans and technical drawings
• Architectural and ride-design documents for park attractions
• Over 4,000 behind-the-scenes photos and videos

Anubis attached a countdown timer to the listing, and reporting indicates the files were published on the dark web from around 27 June 2025 after negotiations apparently failed. Disneyland Paris did not issue a public statement confirming or denying the incident; the breach remained unverified by the victim, so it is treated as an ongoing claimed leak.