The Tribeca Festival has reportedly experienced a significant data exposure involving more than 666,000 records, according to a report by Variety.

Cybersecurity researcher Jeremiah Fowler said he discovered an unsecured online database during a routine search using internet-connected device search tools.

According to Fowler, the exposed information included marketing materials, press kits, promotional images and a backup file containing contact records linked to entertainment industry professionals.

Celebrity-Linked Contact Information Reportedly Included

Fowler said the database contained a "contacts" folder with more than 13,500 entries, including:

• Names
• Email addresses
• Phone numbers
• Postal addresses

Some of the records were reportedly associated with high-profile entertainment figures, including:

• Jennifer Lawrence
• Angelina Jolie
• Robert De Niro
• Morgan Freeman
• Martin Scorsese
• Francis Ford Coppola

However, Fowler noted that many entries appeared to belong to assistants, managers, agents or publicists, while some records were incomplete.

Tribeca Festival Responds

The Tribeca Festival disputed parts of the findings.

According to a statement cited by Variety, festival representatives said none of the celebrities mentioned had their personal contact information exposed.

The organisation stated that the majority of the records consisted of publicly available business contact details, including:

• Talent representatives
• Publicists
• Agency contacts
• Front-office email addresses

The festival also said the exposed information was removed soon after it was notified of the issue.

Researcher Says Exposure Was Likely Human Error

According to Fowler, the incident appeared to result from an unencrypted backup file that had been left accessible within the production database.

He said the information could be viewed through publicly available search tools because it was not encrypted.

Despite criticising the security lapse, Fowler praised the festival's response, saying it acted quickly and professionally after being informed.

He also stated that he found no evidence indicating the database had been accessed by cybercriminals before it was secured.

Why Data Exposures Remain a Concern

Although this incident was reportedly resolved quickly, cybersecurity experts warn that exposed databases can increase the risk of:

• Phishing emails.
• Identity fraud.
• Social engineering attacks.
• Impersonation scams.
• Credential theft.

Fowler noted that advances in artificial intelligence have made it easier for cybercriminals to create convincing phishing messages using publicly available information.

Even business contact details can potentially be exploited to target organisations and individuals.

Why This Matters

Data exposure incidents continue to highlight the importance of securing online databases and backup systems. While the Tribeca Festival maintains that celebrities' personal contact details were not compromised, the case underscores how even business-related information can become valuable to cybercriminals if left publicly accessible. Organisations are increasingly encouraged to implement encryption, access controls and regular security audits to reduce such risks.

Frequently Asked Questions (FAQs)

What happened in the Tribeca Festival data leak?

A cybersecurity researcher reported discovering an unsecured database containing more than 666,000 records, including contact information linked to entertainment industry professionals.

Were celebrities' personal contact details exposed?

The Tribeca Festival said no personal contact information belonging to the celebrities mentioned was exposed and that the records mainly contained publicly available business contacts.

Who discovered the exposed database?

The database was reportedly discovered by cybersecurity researcher Jeremiah Fowler during a routine search for publicly accessible online databases.

Was there evidence of cybercriminal access?

According to Fowler, he found no evidence that cybercriminals had accessed the database before it was secured. However, he noted that he could not definitively rule out prior access.

Why are exposed databases considered dangerous?

Publicly accessible databases can increase the risk of phishing, identity fraud, impersonation and other cyberattacks, particularly when contact information is involved.