Records associated with Tribeca Film Festival were exposed, totaling 666,369 records in a publicly accessible database.
According to Cybersecurity Researcher Jeremiah Fowler, there were three unsecured databases:
- “development” (203,370 records)
- “staging” (224,999 records)
- “production” (238,000 records)
Timestamps ranged from 2019 to 2026.
Inside the “production” database, there was a file containing sensitive information such as phone numbers, email addresses, IP addresses, and hashed passwords.
Furthermore, a document named “contacts” displayed names, phone numbers, email addresses, and physical addresses of well-known film industry celebrities, such as Martin Scorsese, Guillermo del Toro, George Lucas, Winona Ryder, Robert De Niro, Morgan Freeman, and more.
Upon sending a responsible disclosure notice to festival contacts, Fowler received the following response: “Thank you for bringing this information to our attention. We appreciate your responsible disclosure. Tribeca takes matters of data security very seriously and is actively investigating this issue.”
https://www.securitymagazine.com/articles/102473-film-festival-data-leak-exposes-a-list-directors-actors-celebrities
