Picture this: you’re excited to download a helpful AI tool, only to have it completely wreak havoc on your life. This nightmare scenario became a reality for Matthew Van Andel, a Disney employee, last February.

Van Andel innocently downloaded an AI image generator from GitHub, only to discover that it was infected with malware. This malicious software gave a hacker, going by the name “Nullbulge,” access to Van Andel’s personal information, including credit cards and social security numbers.

The hacker took things even further by leaking private customer information and internal revenue numbers from Disney, all linked back to Van Andel’s work credentials. The aftermath of this cyber attack left Van Andel dealing with unexpected bills, compromised social media accounts, and even put his children’s online gaming accounts at risk.

Despite Van Andel’s attempts to alert Disney’s cybersecurity team, the damage had already been done. The hacker had breached his systems through a keylogging Trojan virus, giving them unrestricted access to both his personal and work data.

To add insult to injury, Disney ended up firing Van Andel, falsely accusing him of accessing inappropriate content on his work computer. This unjust accusation not only cost Van Andel his job but also resulted in him losing out on important bonuses and healthcare benefits for his family.

This cautionary tale serves as a stark reminder of the necessity of cybersecurity measures such as two-factor authentication. It showcases the devastating impact of a data breach, not just on individuals but also on the organizations they are affiliated with.

In today’s digital landscape, the threat of cyber attacks is a very real and present danger. It is imperative for both individuals and companies to prioritize their online security to prevent such catastrophic incidents from happening.