A former Disney employee, Matthew Van Andel, has filed a wrongful termination lawsuit against the company fAfter Cyberattack following a cybersecurity incident that compromised sensitive corporate and personal data. Van Andel, who worked in Disney’s tech division, claims that he unknowingly downloaded malware that was later used by hackers to breach Disney’s internal systems.

According to Van Andel, he had downloaded what he believed to be a legitimate AI tool from a code-sharing website onto his personal computer. Months later, he received disturbing messages from an anonymous individual on Discord referencing private conversations he had with colleagues. Soon after, he discovered that his device had been hacked, allowing cybercriminals to access his Disney credentials, which were saved on his computer.

“They’re watching what I’m doing in my email,” Van Andel said, expressing his fear and frustration. The breach extended beyond Disney’s corporate network, exposing millions of Slack messages containing financial and employee data. Additionally, the hackers accessed and leaked Van Andel’s personal information, including his social security number, credit card details, medical records, and even his home security credentials.

Experts Warn of Cybersecurity Risks

Cybersecurity professionals stress that such incidents are not uncommon and highlight the importance of digital security practices due to Cyberattack . Casey Ellis, a cybersecurity expert, stated that individuals should be vigilant about the software they download and install on their computers. He also emphasized the necessity of multi-factor authentication (MFA) to enhance security.

“It puts you one step ahead of the attackers,” Ellis said. “If they get your password, they can’t necessarily get in because they don’t have that second factor needed to authenticate the login.”

Additionally, Ellis recommended keeping personal and work systems separate to prevent corporate data breaches originating from personal devices.

“If there is a clean separation, then the kind of pivot that these attackers managed to execute is going to be a lot more difficult, if not impossible,” he explained.

Van Andel and his family spent weeks attempting to regain control of their accounts while facing a wave of attacks from individuals who had gained access to his leaked information. At the time, he expressed gratitude for Disney’s support as he struggled to cope with the ongoing cyber threats.

Disney Terminates Employee, Lawsuit Follows due to Cyberattack

Despite the turmoil, Van Andel was later dismissed by Disney, with the company alleging that he had accessed inappropriate content on his work computer—an accusation he strongly denies.

“Mr. Van Andel’s claim that he did not engage in the misconduct that led to his termination is firmly refuted by the company’s review of his company-issued device,” Disney stated.

In response, Van Andel’s attorney has filed a lawsuit against Disney, alleging wrongful termination and slander.

“I still have nightmares. I still wake up every morning and wish I hadn’t,” Van Andel said. “Things might get better, but if it happens, it’s going to be a very long road. And I’m just one person, while they are one of the biggest, most powerful companies in the world.”