The Walt Disney Company (NYSE:DIS) has announced plans to phase out Slack by Q1 FY25 following a July 2024 data breach where over 1.1 TB of internal communications were compromised by the hacking group NullBulge.

The breach, which exposed sensitive internal files and messages, has prompted Disney to transition away from Slack in favor of more secure communication solutions. This decision follows heightened concerns around the vulnerabilities of cloud-based platforms used for internal corporate communications. While Salesforce, which owns Slack, emphasized the Shared Responsibility Model at Dreamforce, Disney’s move highlights the ongoing debate around corporate data security and accountability.

As cyberattacks become more frequent and sophisticated, companies like Disney are rethinking the tools they use to protect their proprietary data.

Why It Matters: Disney’s exit from Slack underscores broader concerns about the security of widely-used collaboration platforms. With the rise of cloud-based communication tools, companies must be proactive in protecting their data and infrastructure. Disney’s move could prompt other large enterprises to reassess their reliance on third-party platforms for internal communication, especially those involving sensitive information.

• July 2024 Data Breach: Hackers from NullBulge accessed over 1.1 TB of Disney’s internal Slack communications, exposing sensitive files and conversations. Disney’s decision to discontinue Slack highlights the severity of the breach and its potential impact on corporate security.

• Salesforce and Shared Responsibility: Salesforce CEO Marc Benioff defended Slack, emphasizing the importance of the Shared Responsibility Model, which highlights that while providers secure infrastructure, companies are responsible for configuring their data protection measures and educating employees on security best practices.

• Disney’s Transition: Following the breach, Disney announced it will transition away from Slack by early FY25, seeking more secure communication solutions that offer better protection against cyber threats.

• Wider Implications for Cloud Platforms: Disney’s exit may signal a broader shift in how enterprises approach the security of cloud-based tools like Slack. Other companies, especially those managing sensitive intellectual property or customer data, might now re-evaluate their reliance on similar platforms.

• Industry Response: The breach coincides with the formation of the Low-Code Security Alliance, which seeks to address vulnerabilities in low-code platforms like Salesforce. This initiative reflects the growing recognition of security risks associated with widely used enterprise software solutions.

Go Deeper -> Disney to ditch Slack following July data breach – CNBC

Disney’s Slack Breach: A Wake-Up Call for the Shared Responsibility Model – SalesforceDevops