Tribeca Festival Data Leak Exposes Contact Details of Thousands of Hollywood Figures, Including De Niro and Jolie

Hollywood has been hit by a major cybersecurity incident.

A data leak from the Tribeca Festival has exposed the contact information of thousands of prominent figures in the film world, including actors, directors and other industry figures, among them Robert De Niro and Angelina Jolie.

The leak was discovered by cybersecurity expert Jeremiah Fowler, who said he identified a total of 666,369 exposed files covering the period from 2019 to 2026.

After the news was published, Tribeca Festival organizers responded with a statement, explaining that the data was removed immediately once the issue was identified.

“None of the individuals named in recent reports had personal contact information exposed. The vast majority of the information consisted of publicly available professional contacts, including public relations representatives, artists’ agents, official email addresses, data from the festival’s website and other information already in the public domain. All of this data was removed immediately after the issue was discovered,” the festival said in its response.

A copy of the published data. According to Variety magazine, the database contained a backup with potentially sensitive information. It included a folder named “contacts,” which contained 1,535 entries, including names, addresses, phone numbers and email addresses for directors such as Martin Scorsese, Francis Ford Coppola, Guillermo del Toro and Ron Howard, as well as actors Robert De Niro, Jennifer Lawrence, Angelina Jolie, Morgan Freeman, Rami Malek, Eva Mendes and Michael J. Fox.

However, Fowler explained that some of the contact details were incomplete or contained information for assistants, managers or public relations offices rather than personal email addresses or private phone numbers, thus confirming the festival organizers’ position.

According to the cybersecurity expert, the leak was caused by human error, as a database backup had been left accessible and was stored in plain-text format without any form of encryption.