A Tribeca Film Festival data breach has reportedly exposed the contact information of Hollywood stars including Angelina Jolie, Robert De Niro and Martin Scorsese, alongside details linked to other prominent actors and filmmakers. Cybersecurity researcher Jeremiah Fowler reportedly identified nearly 666,000 records across four databases connected to the annual New York film festival, raising concerns over the exposure of personal and professional information.
According to reports, the exposed records included names, phone numbers and email addresses. While several high-profile celebrities were reportedly listed in the databases, sources cited in the reports said most of the leaked contact information belonged to managers and agents representing celebrities rather than the stars themselves.
Tribeca Film Festival Data Breach Exposes 666,000 Records
The alleged data breach was first flagged by Fowler after he discovered four databases containing nearly 666,000 records dating from 2019 through 2026. The information was reportedly connected to the Tribeca Film Festival, which was founded in New York by Robert De Niro and others.
Fowler reportedly alerted the festival about the exposure shortly before its 12-day event began on June 3. The exposed information allegedly included contact details that could potentially be used by attackers for targeted phishing or malware campaigns.
The researcher also reportedly found a folder containing device information associated with email addresses. The data allegedly indicated details such as the version of an iPhone being used, whether Safari was the browser in use and the software version installed on the device.
According to Fowler, such information could provide attackers with additional details that may help them target individuals.
Angelina Jolie, Robert De Niro Among Names Reportedly Exposed
The alleged exposure reportedly involved contact information associated with several well-known Hollywood figures. The names mentioned in reports include Angelina Jolie, Robert De Niro, Martin Scorsese, George Lucas and Danny Boyle.
Actors reportedly appearing in the records include Morgan Freeman, Jennifer Lawrence, Winona Ryder, Neil Patrick Harris, Rami Malek, Sharon Stone and Michael Douglas.
However, the extent to which the celebrities’ own private contact details were exposed remains unclear. A source cited in the reports said the majority of the information reportedly belonged to managers and agents who represent the celebrities.
This distinction suggests the databases may have been used for professional communication and coordination connected to the film festival rather than containing direct personal accounts belonging to the celebrities.
Tribeca Film Festival Investigates Alleged Data Exposure
The Tribeca Film Festival reportedly responded after receiving the disclosure from Fowler, saying it takes data security seriously and was actively investigating the matter.
The databases have since reportedly been removed from public access. However, it remains unclear how long the information was accessible online or whether unauthorized individuals accessed, copied or misused the exposed data before it was taken down.
Jeremiah Fowler, the cybersecurity researcher who identified the exposed databases, told The Cyber Express that he found no evidence of malicious activity. “No, I didn’t see any evidence like a ransomware message or something like that,” Fowler said. He added that the database contained “lots of non-sensitive documents like press releases and event details.” According to Fowler, “even if someone found it, they would probably see these type of documents and just ignore it.”
However, he said the discovery of a backup file changed the situation. “When I discovered that the database contained a backup file, that’s when things got serious,” Fowler said, adding, “It was likely human error why there was a backup file stored in this database.”
The reports also clarified that there is no suggestion that the Tribeca Film Festival was directly responsible for the alleged exposure. The organisation has not reportedly provided further public details about the incident beyond its initial response.
Celebrity Data Breach Raises Security Concerns
The alleged celebrity data breach highlights the security risks surrounding databases containing information about public figures and the professionals who work with them.
Even when exposed records primarily belong to managers and agents, such information can potentially reveal connections between celebrities and their representatives. The reported inclusion of device information could also provide additional context about the technology used by individuals associated with the records.
The incident adds to concerns over how personal and professional data connected to major cultural events is stored, managed and secured online. With the investigation reportedly ongoing, questions remain about the source of the exposure, the duration of public access and whether any of the information was misused.
