A former Disney employee in Florida has been sentenced to three years in federal prison after pleading guilty to aggravated identity theft and computer fraud, stemming from a hacking incident that altered sensitive restaurant menu data.
Michael Scheuer, 40, previously employed in a role responsible for publishing menus at Disney parks, was terminated from his position in June 2024 following internal misconduct. Federal records state that his dismissal on June 13, 2024, was “hostile and not amicable.”
According to federal investigators, Scheuer unlawfully accessed Disney’s internal menu management system following his termination. He allegedly made unauthorized edits, including inserting offensive language, changing item prices, and — most alarmingly — modifying allergen warnings to falsely indicate that certain dishes were safe for individuals with food allergies. 
Authorities further revealed that Scheuer tampered with wine origin listings, replacing them with references to locations of recent mass shootings. He also launched distributed denial-of-service (DDoS) attacks, temporarily locking out various Disney employees from accessing their work accounts. The total damages attributed to his actions are estimated to exceed $150,000.
On September 23, 2024, FBI agents raided Scheuer’s residence and seized four computers believed to have been used in the cyberattacks.
At his sentencing, Scheuer’s attorney, David Haas, stated that his client was remorseful and has ongoing health issues that contributed to his conduct. Haas argued that Scheuer was initially suspended due to a medical incident, but that Disney later terminated him without explanation or accommodations. He also mentioned that Scheuer filed a formal complaint with the Equal Employment Opportunity Commission (EEOC) regarding the matter.
Alongside the prison term, the court ordered Scheuer to pay $690,000 in restitution, the majority of which will go to Disney to cover the financial impact of the breach.
