Orlando, FL — A former Walt Disney World employee allegedly hacked into company servers after being terminated, manipulating computer menus by adjusting prices, inserting profanities, and falsely marking certain items as safe for individuals with allergies, as outlined in a federal criminal complaint.
The man, whose name remains undisclosed, allegedly hacked into Disney’s servers after his termination, targeting digital menu prices and allergy indicators in a way that, according to the complaint, could have posed severe risks for guests with dietary restrictions.
Federal investigation and arrest
The individual was arrested last week after an FBI-led investigation tracked the source of the security breach. David Haas, a court-appointed attorney representing the accused, stated Thursday that his client plans to plead not guilty once formal indictments are filed. For now, the accused remains in custody, with a bond hearing scheduled for next week. According to Haas, the former employee has battled mental health issues since childhood and is under the care of a psychiatrist. In a motion for his client’s release, Haas argued, “He is not receiving any mental health counseling or treatment in jail.”
Alleged security breach and altered menu-content
Per Disney’s internal investigation, the former employee allegedly manipulated the menu system to include swear words and altered allergy notices to incorrectly mark some items as safe for people with food allergies. The breach, had it gone undetected, could have led to “potentially fatal consequences depending on the severity of the customers’ allergies,” according to the complaint. The situation forced Disney to take its menu-creation software offline for over a week, incurring estimated damages exceeding $150,000. “Disney detected the changes before the menus were distributed to restaurants,” the company said, avoiding any direct harm to guests. In addition to the profanity and altered allergy notifications, the former employee allegedly redirected menu QR codes to a controversial website advocating a boycott of Israel. This action, alongside his tampering with the internal system, disrupted Disney’s operations and required extensive internal cleanup, the complaint notes.
Background of the termination and suspicions raised
The former employee, who held the role of menu production manager, had responsibilities including the development and release of menus across Disney’s dining establishments. According to the criminal complaint, Disney labeled his departure as “contentious and not considered to be amicable.” Given his former access level, only someone in his position or with similar authority “would have the accesses and knowledge to carry out the attacks,” the complaint stated. The former Disney worker has denied all allegations, maintaining his innocence following an FBI search of his home last month.