Fired Disney staffer accused of hacking menu to add profanity, wingdings, removes allergen info
If you're gonna come at the mouse, you need to be better at hiding your tracks
A disgruntled ex-Disney employee has been arrested and charged with hacking his former employer's systems to alter restaurant menus with potentially deadly consequences.
Michael Scheuer was charged [PDF] and arrested last week for allegedly violating the Computer Fraud and Abuse Act on three occasions by breaking into a former employer's systems. Disney is not named in the complaint, but The Register has been told they are the company in question, and Scheuer's former employer.
Fired from his role at Disney as a menu production manager in June for what the complaint notes was unspecified "misconduct," the dismissal "was contentious and was not considered to be amicable," according to court documents signed by US magistrate judge Daniel Irick in what appears to be crayon (see page 25 of this PDF).
Scheuer allegedly went into action quickly following his termination, and by early July was said to have used his work credentials, which still functioned after his termination, to access the menu creation system Disney contracted another company to create and change all the fonts in the system to wingdings symbols.
"The fonts were renamed by the threat actor to maintain the name of the original font, but the actual characters appeared as symbols," the complaint alleged.
"When launched, Menu Creator reached out to the configuration files to retrieve what it believed to be the correct font, instead, it retrieved the altered font files," the document continued. "As a result of this change, all of the menus within the database were unusable because the font changes propagated throughout the database."
According to the complaint, the changes knocked the system
Article