Disneyland Paris targeted by Anubis ransomware group

• Ransomware group: Anubis
• Country: France
• Sector: Hospitality
• Announcement date: June 20, 2025

Anubis group claims to have stolen data from Disneyland Paris

The ransomware group known as Anubis has published a claim on its leak site involving Disneyland Paris. According to the announcement made on June 20, 2025, the group alleges they have successfully exfiltrated a significant amount of confidential information belonging to the organization. The group claims that the breach occurred on the same day the announcement was posted.

The scale of the alleged theft is substantial, with the group claiming to have accessed 64 GB of data. This data is said to consist of approximately 39,000 files. While ransomware groups often use double extortion tactics—where they both encrypt a victim's systems and threaten to leak sensitive data to pressure the organization into paying a ransom—no specific ransom demand has been disclosed in this particular listing.

Details of the alleged data leak

The Anubis group claims that the stolen information includes highly sensitive materials related to the park's infrastructure and internal operations. According to the group, the leaked files contain confidential drawings, various contracts, and technical specifications that are vital to the park's construction, renovation, and ongoing operational processes. This type of data exposure often targets the intellectual property and the structural secrets of large-scale commercial entities.

In addition to technical and legal documentation, the group alleges that the breach includes a significant amount of visual media. Specifically, it is claimed that over 4,000 photos and videos, which depict behind-the-scenes operations of the park, have been compromised. The content of the leak is said to include:

• Technical drawings
• Engineering documents
• Contracts
• Geological reports
• Internal operational photos and videos

The specific technical drawings mentioned in the claim involve various park zones and popular attractions, such as Frozen and Crush's Coaster. The documentation allegedly includes engineering calculations, geological reports, and safety standards, alongside internal contracts and various behind-the-scenes media.

About Disneyland Paris

Disneyland Paris is a massive theme park and resort complex located in Chessy, France, operated by The Walt Disney Company. As one of the most visited tourist destinations in Europe, it features theme parks, hotels, and shopping areas.

Potential impact and industry implications

The publication of this data by the Anubis group may pose significant risks to the operational security and the intellectual property rights of Disneyland Paris. The potential use of these technical documents by competitors could negatively impact the organization's competitive advantage. Furthermore, because the organization is located within the European Union, it may face regulatory scrutiny regarding compliance with GDPR requirements following such a breach.

The breach of employee non-disclosure agreements could also lead to a reassessment of internal security policies. In the hospitality and large-scale tourism sector, protecting operational secrets and technical specifications is critical for maintaining safety and competitive positioning. Organizations in this sector often focus on robust access controls and data loss prevention to mitigate such risks. Publicly available information regarding the Anubis group remains limited.