Cybersecurity researcher Jeremiah Fowler discovered a massive leak of sensitive information linked to the Tribeca Film Festival. the breach, caused by misconfigured cloud databases,exposed the personal contact details of dozens of Hollywood icons.
666,369 records and the 'contacts' folder vulnerability
Jeremiah Fowler, a researcher with the US-based firm Black Hills Information Security, identified three misconfigured databases associated with the Tribeca Film Festival. according to the report, these databases contained a total of 666,369 records spanning the years 2019 to 2026. while the vast majority of these entries consisted of standard marketing materials, such as press releases, the breach contained a much more dangerous element.
The vulnerability was located within a specific backup file stored on a cloud system. Within this file, a folder explicitly labeled 'contacts' held the sensitive personal deetails of high-profile individuals. This distinction is critical; while the marketing data might be public knowledge, the contents of the 'contacts' folder represent a direct violation of personal privacy.
From Angelina Jolie to Martin Scorsese: High-profile targets at risk
The exposure of this contact list puts some of the most recognizable figures in the film industry in immediate danger. The leaked data includes private email addresses and phone numbers for industry titans such as Robert De Niro, Martin Scorsese, and George Lucas. Other high-profile individuals identified in the breach include Angelina Jolie, Rami Malek, Sharon Stone, Michael Douglas, Danny Boyle, and Neil Patrick Harris.
Fowler warned that this level of exposure goes beyond mere privacy concerns, posing significant threats of identity theft and physical stalking.. For celebrities who already manage high levels of personal security, the leak of unlisted phone numbers and direct email addresses provides a roadmap for malicious actors to bypass traditional gatekeepers.
The human error behind the 2024 Tribeca cloud misconfiguration
This incident is part of a broader, troubling trend where massive data exposures are driven by simple configuration mistakes rather than sophisticated hacking attempts. As reported by the cybersecurity expert, the breach was attributed to human error in how cloud systems were managed. This highlights a recurring problem in the digital age: even the most prestigious institutions can be undone by a single misplaced folder or an incorrectly set permission.
This event echoes other recent security failures noted by Fowler, including a discovery involving stalkerware targeting a European entrepreneur. such incidents suggest that high-profile individuals remain constant targets for both accidental and intentional digital intrusion, often through the most basic technical oversights.
What remains unaddressed by Tribeca Film Festival organizers?
While Fowler notified the festival organizers and the databases were secured before last month's event, several critical questions remain unanswered. The Tribeca Film Festival, which was founded by Robert De Niro in 2002, has not yet issued an official statement regarding the breach. This silence leaves the affected celebrities in a state of uncertainty regarding their actual level of exposure.
It is currently unknown how long these databases were accessible to the public or if any malicious actors successfully downloaded the files before the security fix was implemented. Furthermore, the festival has not clarified what specific steps are being taken to audit their cloud storage or ensure that such a massive collection of celebrity data does not leak again.
Comments 0