Former Disney Worker Sentenced to Prison Over Menu Tampering

A former employee of Disney has been sentenced to spend three years in federal prison for conducting unauthorized entries into the company's servers to modify restaurant menu allergen details and orchestrating denial-of-service attacks to restrict other staff members from accessing their accounts. The court has also imposed nearly $690,000 in fines on Michael Scheuer.

Scheuer, who admitted guilt in January, previously had legitimate access to Disney's system for creating and editing menus due to his role at the company. Despite being terminated in June of the previous year, Scheuer exploited a team-shared password to make changes. This included adding or altering allergy information within food descriptions while leaving the allergen information sheet untouched, as detailed in court filings. Legal representatives from the U.S. argued that his modifications could lead people to mistakenly believe certain foods were safe to consume when they were not.

In his tampering, Scheuer also substituted menu fonts with Wingdings and humorously renamed dishes (for instance, turning 'Shellfish' into 'Hellfish'). According to CNN, Disney was able to identify and rectify all the manipulated menus before their distribution to dining venues.

Scheuer's defense attorney claimed in a sentencing brief that his client altered the menus solely to capture the company's attention, allegedly because he was unjustly dismissed owing to a mental health issue. The lawyer noted that Scheuer suffered a panic attack amid a workplace argument and sought mental health support as grounds for his termination. However, he faced barriers in obtaining legal representation and struggled to garner any response from the company regarding his grievances. Nevertheless, federal prosecutors maintained that some of Scheuer's modifications were tactically hidden to evade detection.

Beyond menu interference, U.S. authorities accused Scheuer of executing numerous denial-of-service attacks targeted at fourteen specific employees, including several linked to his firing. By simulating countless failed login attempts, he managed to temporarily lock these employees out of their accounts. Additionally, after an FBI inquiry at his residence, Scheuer was spotted near one of the employees' homes. The prosecutors acknowledged that Scheuer's misconduct was partially driven by a 'mental health episode.'