Security News > 2024 > June > Club Penguin fans breached Disney Confluence server, stole 2.5GB of data
Club Penguin fans hacked a Disney Confluence server to steal information about their favorite game but wound up walking away with 2.5 GB of internal corporate data, BleepingComputer has learned.
While Club Penguin was officially shut down in 2017, and its successor, Club Penguin Island, in 2018, the game continues to live on in private servers run by fans and independent developers.
BleepingComputer has since learned that Club Penguin data is only a small part of a much larger data set stolen from Disney's Confluence server, which stores documentation for various business, software, and IT projects used internally by Disney.
The source says that the threat actors were initially looking for Club Penguin data; they wound up downloading 2.5 GB of data about Disney's corporate strategies, advertising plans, Disney+, internal developer tools, business projects, and internal infrastructure.
While the Club Penguin data is fairly old, the rest of the data circulating on Discord is far newer, with information from 2024.
The Disney corporate data appears to have been downloaded much sooner, as they contain the following text, "Document generated by Confluence on Jun 01, 2024 21:59.".