Data Leak at Tribeca Festival Exposes Celebrity Contacts
A cybersecurity researcher uncovered a six‑hundred‑thousand‑record data breach that had been publicly accessible from 2019 to 2026.
The exposed file, stored in plain text within the festival’s public database, contained:
- Names and addresses of prominent filmmakers and actors (e.g., De Niro, Lawrence, Jolie).
- Public business contacts: PR emails, office numbers, marketing materials.
- A smaller subset of personal details such as phone numbers and private emails.
Background
The Tribeca Festival, founded in 2002 to aid New York after 9/11, has showcased notable films and honored winners for a quarter of a century. The leak occurred because the festival maintained an unencrypted backup file, easily discoverable via simple connected‑device search engines.
Response
Upon notification, the festival:
- Removed the exposed files immediately.
- Confirmed that no personal data were shared beyond what was already public.
Expert Insight
The researcher cautioned that an extensive list of email addresses online poses significant risks in the era of AI. Artificial intelligence can generate convincing phishing emails or malware, potentially targeting all listed contacts simultaneously.
“My goal is to help companies fix their weaknesses, not to embarrass them.”
