A Tribeca Film Festival data leak exposed celebrity contact details and showed how one simple mistake can put private information online.
Quick Take
- Cybersecurity researcher Jeremiah Fowler found 666,369 exposed records tied to Tribeca Enterprises.
- The exposed files included a backup folder with names, addresses, phone numbers, and email addresses.
- Reports say celebrities such as Robert De Niro, Angelina Jolie, and Martin Scorsese were among those named.
- The festival removed the public access after being notified and said it was investigating the incident.
What the breach exposed
Variety reported that Fowler found several exposed databases tied to the Tribeca Festival, including one backup file in plain text. The report said the leak covered records from 2019 through 2026 and included marketing material, press kits, and promotional images. But it also contained a contacts folder with sensitive personal details. That mix matters because it shows how harmless-looking files can still carry real privacy risk.
The most troubling part was not the size of the leak alone. It was the kind of data that sat beside the public material. The exposed contacts folder reportedly held 13,535 entries with names, addresses, phone numbers, and email addresses for filmmakers, talent, and other industry figures. Reports said the data was reachable online without encryption, which means anyone who found it could view it in a browser.
Why the names drew attention
The story spread fast because the list included some of Hollywood’s biggest names. Reporting named Robert De Niro, Angelina Jolie, Jennifer Lawrence, Martin Scorsese, Francis Ford Coppola, Guillermo del Toro, Ron Howard, and others. That kind of exposure will always grab headlines. But the deeper issue is simpler: when an organization leaves private records open, famous or not, it invites trouble for the people in those files.
One report said the data also included device details such as iPhone versions and web browsers. That may sound small compared with phone numbers and email addresses, but it can still help identify a person’s habits or digital setup. For public figures, that kind of detail can aid harassment, phishing, or other scams. In plain terms, the breach did not just expose names. It exposed a roadmap.
How the festival responded
Reports say Fowler notified the Tribeca Film Festival after finding the exposed systems, and the databases were then removed from public access. The festival also said it was actively investigating the incident. One report said a source close to the matter described the “vast majority” of contact details as belonging to managers and agents rather than the celebrities themselves. That does not erase the problem. It only narrows the scope.
Tribeca Film Festival Data Breach: Nearly 666,000 Records, Celebrity Contact Details Reportedly Exposedhttps://t.co/XPhB0LPlxV
— The News Strike (@TheNewsStrike) July 27, 2026
This kind of breach fits a familiar pattern in modern data leaks. A cloud system is left open, a researcher spots it, and the company pulls it down after the damage is already possible. In this case, the public record points to exposure, not confirmed theft or misuse. Still, the lesson is clear. If an organization cannot guard basic contact data, readers have every reason to question how seriously it treats privacy.
Sources:
pjmedia.com, variety.com, financialexpress.com
