According to HACKread, the Anubis ransomware collective has identified Disneyland Paris as their most recent target in what they describe as a significant cyberattack.
105. El Andaluz & Europa-Park Trip Report – AirMagique – Unofficial Disneyland Paris & European Theme Park Podcast
The cybercriminal organization has published evidence of their alleged security breach on their darknet platform, claiming to have extracted a substantial 64GB archive of sensitive information from the popular theme park destination.
About the Anubis Ransomware Operation
Anubis operates as a ransomware-as-a-service platform that first emerged in December 2024, having developed from an earlier prototype called “Sphinx.” This group should not be confused with other malicious software bearing similar names, including an Android banking trojan and Python backdoor.
The criminal enterprise operates on a revenue-sharing basis with its partners, offering 80% of profits from ransom collections, 60% from data extortion schemes, and 50% from selling system access. Security researchers at Trend Micro have identified that the group employs a “Built-in Wiper” capability designed to permanently destroy data on infected systems.
Details of the Disneyland Paris Cyberattack
The ransomware operators have characterized this incident as “the largest data leak in the history of Disneyland Park.” They report obtaining approximately 39,000 files connected to construction and infrastructure projects at the French theme park location.
The breach reportedly occurred through a compromise of one of Disneyland’s business partners rather than a direct attack on the park’s systems. As stated by the attackers: “During the leak of data of the partner company, 39,000 files related to the construction and renovation of the Disneyland Paris location ended up in our hands.”
Leaked Content and Evidence
To substantiate their claims, the cybercriminals announced they would publish sample data within five hours of their initial disclosure. The released materials allegedly include visual documentation and technical specifications for numerous park attractions.
The compromised files reportedly contain blueprints and construction details for popular attractions including:
- Frozen-themed installations and attraction
- Crush’s Coaster
- Pirates of the Caribbean
- Big Thunder Mountain
- Autopia
- Buzz Lightyear Laser Blast
- Orbitron
- Casey Jr.
- Phantom Manor
- Ratatouille : L’Aventure Totalement Toquée de Rémy ride systems
Additional leaked materials appear to show engineering documentation and construction activities and backstage footage throughout the park.
Significance and Implications
The attackers emphasized the sensitive nature of the stolen information by noting that Disneyland Paris typically requires employees to sign non-disclosure agreements that strictly forbid the public sharing of internal documentation and plans.
The published breach details do not indicate whether personal information of park visitors or customers was compromised in the incident. Additionally, it remains unclear whether the ransomware group has issued any financial demands to Disneyland Paris in connection with this breach.
The Anubis group promoted their attack through their official social media presence on June 12, 2025, drawing attention to the significant security incident affecting one of Europe’s most visited tourist destinations. Subscribe to AirMagique for more news and updates.
Support AirMagique on Patreon and follow us on BlueSky, Instagram, Spotify (Podcast), Apple Podcast, and YouTube to get your daily dose of Disneyland Paris and European theme parks.
Disneyland Paris Announces Deadpool Holiday Entertainment and Zootopia 2 Experiences
Disneyland Paris has unveiled new seasonal attractions and character experiences scheduled for this holiday season, including the return of a popular Marvel character and activities tied to the theatrical release of Zootopia 2. Deadpool Returns for Holiday SeasonThe Marvel character Deadpool will appear at the Marvel Avengers Campus in Walt Disney Studios Park from December…
Mandy Moore Returns to Voice Rapunzel for New Disneyland Paris Attraction
Disneyland Paris has revealed more details for a new family attraction based on Disney’s 2010 animated film Tangled, scheduled to open on March 29, 2026. The attraction, named Raiponce Tangled Spin, will feature spinning gondolas beneath a lantern-filled sky designed to evoke one of the film’s most recognizable scenes. The ride will incorporate newly arranged…
World’s First LEGO Harry Potter Land Coming to Legoland Germany
LEGOLAND Deutschland Resort in Günzburg is getting a magical addition: Merlin Entertainments and Warner Bros. Discovery Global Experiences announced a strategic partnership on Monday to create the world’s first LEGO Harry Potter themed area along with the first-ever Harry Potter themed accommodation. The collaboration marks a significant milestone for LEGOLAND Deutschland, making it the first…
AirMagique - European Theme Parks & Disneyland Paris 
Leave a comment