Disney Engineer’s Career Destroyed After Downloading Malicious AI Tool.
Matthew Van Andel, a former Disney engineer, claims that his decision to download a seemingly innocent AI tool for creating images from text prompts has destroyed both his career and personal life.
What Van Andel believed to be a helpful tool from GitHub, a code-sharing platform, turned out to be malware that gave hackers access to his digital life, including his work data and personal financial information.
In February, Van Andel downloaded the software onto his computer at his $1.1 million home, unaware that it would soon lead to disastrous consequences. By July, he realized something was terribly wrong when he received a Discord message from a hacker who claimed to have accessed sensitive details about his personal and professional life. The hacker knew intimate details about Van Andel, including a conversation he had with colleagues in a private Slack channel.
GitHub is a proprietary developer platform that allows developers to create, store, manage, and share their code.
The situation quickly escalated when the hacker threatened to release more information. The next day, over 44 million Disney messages were published online, exposing private customer data, employee passport numbers, and confidential company information, including revenue figures from Disney’s theme parks and streaming services.
The hacker, who later identified themselves as part of a Russia-based hacktivist group, stated in an email that they had an “inside man” — Van Andel — who was allegedly complicit in allowing access to Disney’s systems. Although the hacker claimed to be an artist’s rights advocate, researchers believe the individual is likely an American working alone for financial gain.
As a result of the breach, Van Andel had his credit card numbers, financial logins, Social Security number, and even his home security camera information exposed. His children’s Roblox accounts were hacked, and his personal social media was filled with offensive language from people using the stolen data.
The fallout from the breach didn’t stop there. Van Andel was fired from Disney after an investigation revealed that his company-issued device contained pornographic material — a claim he denies. Disney’s review of his device ultimately led to his termination. Additionally, Van Andel’s health insurance was terminated, and he lost about $200,000 in bonuses.
Describing the experience as "impossible to convey" due to the immense violation, Van Andel found himself struggling with the long-lasting impact on both his professional and personal life. The breach left him financially and emotionally devastated, and his reputation was tarnished.
Van Andel’s family has since launched a GoFundMe campaign to help him and his family through the difficult situation. The page’s description highlights the destructive impact of the hacker’s actions, which have affected not only Van Andel’s career and finances but also the well-being and security of his family.
Van Andel’s story serves as a cautionary tale of how a seemingly harmless tool can lead to life-altering consequences. The breach continues to unfold, leaving him to deal with the repercussions of the stolen data and its ongoing effects on his life.
