X-Industry

Nickelodeon is respected by millions across the globe, but rumors are circulating on the Internet suggesting this popular children’s entertainment network has fallen victim to a significant data breach or leak.  According to several Internet forums and tweets, approximately 500GB of data, including unreleased television shows, scripts, and other materials, have been compromised.  Reportedly, Nickelodeon’s legal team has taken swift action, aggressively pursuing Digital Millennium Copyright Act (DMCA) takedowns. Merely mentioning the contents of the leak has resulted in severe consequences for the individuals involved.

Allegedly, the leaked data is said to have originated from Nickelodeon’s “consumer products and experience” portal. An authentication issue within the system allowed unauthorized users to gain access to the Nickelodeon animation department’s sensitive content.  Although the leak was initially observed in January 2023 on Discord, Nickelodeon has since addressed the vulnerability and patched the portal.[1]

On 29 June, a Twitter user with the handle @GhostyTongue disclosed details about the alleged leak in Nickelodeon’s animation department. According to @GhostyTongue, two individuals involved in the leak, known by their Discord usernames as “BowDown” and “IncidentalSeventy,” have reportedly faced action from either law enforcement or Nickelodeon itself.

Adding to the claims, @GhostyTongue stated on 2 July that a private Discord server had recently circulated a URL to download an entirely new leak.  This time, it allegedly contained the source code for all Nickelodeon Flash Games.

In a separate development, a user on 4chan claimed to possess insider information regarding the breach.  The user asserted that Nickelodeon’s internal database had been compromised for over a year, potentially impacting all current productions.

According to their account, numerous private communities have been sharing portions of the leaked files, with trusted members having access to more extensive leaks containing assets such as PSDs, scripts, and animation files.

The user estimated that the breached data amounts to over 500GB and includes thousands of files from various shows, including high-profile series like SpongeBob.

It is also worth noting that the claims of 4chan user match with the list of leaked content shared by @GhostyTongue on their Twitter account:

Researchers have also seen a list of Nickelodeon’s animation pitch bibles that have been making rounds on the Internet.  The screenshots or downloadable links will not be shared due to legal reasons.

It is crucial to note that the authenticity of these claims and the nature of the data leak remain unverified. The origins of the incident are still uncertain, leaving open the question of whether it was an internal security lapse or an external cyberattack.

The Déjà vu of the HBO Breach - the recent rumors surrounding a potential data breach at Nickelodeon bring to mind the notorious HBO data breach that occurred in 2017. During that incident, hackers infiltrated HBO’s systems and leaked unreleased episodes of the popular series Game of Thrones, along with other sensitive data.

The HBO hacking saga lasted for several months, causing significant distress for the network and its viewers.  It was not until later that an Iranian citizen emerged as the alleged perpetrator behind the HBO hack. He was subsequently charged and indicted for his involvement in the cyberattack.  The hacker still remains wanted by US authorities (FBI).

While drawing parallels between the Nickelodeon rumors and the HBO data breach is natural given the nature of the alleged incidents, it is essential to treat the current situation as a separate and distinct event. Investigations are still ongoing, and concrete evidence regarding the extent and nature of the Nickelodeon data leak is yet to be confirmed.

As more information becomes available, Hackread.com will continue to provide updates on the alleged Nickelodeon data breach, clarifying the extent of the incident and its implications for the entertainment industry giant.

This article is presented at no charge for educational and informational purposes only.

Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization.  For questions, comments, or assistance, please get in touch with the office directly at 1-844-492-7225, or feedback@redskyalliance.com

Weekly Cyber Intelligence Briefings:

Reporting:    https://www.redskyalliance.org/

Website:       https://www.redskyalliance.com/

LinkedIn:      https://www.linkedin.com/company/64265941

Weekly Cyber Intelligence Briefings:

REDSHORTS - Weekly Cyber Intelligence Briefings

https://attendee.gotowebinar.com/register/5993554863383553632  

[1] https://www.hackread.com/nickelodeon-data-leak-unreleased-shows-scripts/