Overview

• Ryan Mitchell Kramer, 25, pleaded guilty to two federal felony charges: unauthorized computer access and threatening to damage a protected computer, each carrying a maximum five-year sentence.
• Kramer used malware disguised as an AI art generation tool to hack a Disney employee's computer in early 2024, gaining access to login credentials and internal Slack channels.
• Between April and May 2024, Kramer exfiltrated approximately 1.1 terabytes of confidential data, including sensitive corporate communications and personal employee information.
• In July 2024, posing as a fictitious Russian hacktivist group called 'NullBulge,' Kramer threatened to leak the stolen data and followed through when his demands were ignored.
• The FBI continues to investigate additional victims of Kramer's malware, while he awaits his initial court appearance following the plea agreement.