Paramount’s Unreleased ‘Legend of Aang’ Film Leak Sparks Major Crisis
On April 12, an anonymous account on X, known as ImStillDissin, posted two brief clips from what appeared to be the unreleased film Legend of Aang: The Last Airbender. The account claimed that Nickelodeon had “accidentally” emailed him the entire movie, a statement that was later revealed to be misleading. The individual later stated, “I saw it’s just a Paramount+ thing, so I decided I’d troll a little bit” by sharing the snippets. Within a day, a full-length version of the film became available online.
Paramount’s Response to the Leak
The leak quickly escalated into a significant crisis for Paramount. The company’s legal team worked diligently to remove clips and downloads of the film from the internet, but the damage had already been done. The initial clips garnered over 100,000 likes within 12 hours before being taken down. Fans organized watch parties for the film, which even made it onto Letterboxd’s “popular this week” list. Counterfeit DVDs of the film continue to be sold on eBay.
For fans of Avatar: The Last Airbender, the film was anticipated as a long-awaited return to the beloved franchise. The original series aired from 2005 to 2008 and experienced a resurgence on Netflix in 2020, dominating the platform’s daily charts for over 60 days. It remains one of Nickelodeon’s most cherished properties, and Paramount recognizes the potential for profit from the franchise.
Avatar Studios and Future Plans
Avatar Studios was established in 2021 to expand the Avatar universe, including upcoming series like Seven Havens. Initially, The Legend of Aang was set for a theatrical release, but plans shifted following David Ellison’s takeover of the studio amid the Skydance merger.
An investigation into the leak has been initiated by Paramount. Sources indicate that the company has ruled out its own responsibility, suggesting that the breach may have originated from a third-party platform with access to the film, which cost tens of millions to produce.
Investigating Vision Media’s Role
Vision Media, a company responsible for awards promotion for major studios, is currently examining whether the leak can be traced back to security weaknesses in its systems. In a recorded conversation, Vision Media CEO Jason Deadrich acknowledged to a gray-hat hacker, Jason Sawyer, that cybercriminals “seem to have access to content” on their servers, although he expressed uncertainty about how this occurred. Deadrich mentioned that their remediation plan is extensive.
Gray-hat hackers, unlike white-hat hackers, infiltrate corporate systems to identify vulnerabilities, deciding later whether to inform the company or disclose their findings publicly. Sawyer confirmed that he had identified an exploit in Vision Media’s network that allowed unauthorized access. He stated, “I validated the steps I had received from a threat actor and confirmed this was a real issue.”
The investigation has not definitively assigned blame to Vision Media. Deadrich noted that he “can’t determine what specifically happened or how it happened.” The company has declined to comment further, citing ongoing investigations involving third parties.
The Broader Context of Movie Leaks
Historically, studios have invested heavily in cybersecurity since the infamous Sony Pictures hack in 2014. However, vulnerabilities persist, often stemming from awards screeners. For instance, the piracy group Hive-CM8 leaked several unreleased Oscar contenders in 2015 after obtaining physical copies of screeners sent to voters.
In the case of Legend of Aang, it is suspected that hackers accessed Vision Media’s server, which contains catalogs of films viewed by awards voters. Sawyer indicated that hackers had likely been navigating the network for an extended period.
Days after the conversation, a 26-year-old man was arrested in Singapore for allegedly accessing a media server without authorization and leaking the film online, according to a report from The Straits Times.
Identifying the Hacker
Several clues point to the identity of the hacker. Sawyer identified the person behind the ImStillDissin account as Devesh Logendran, a cyber expert previously charged in 2018 for hacking the NFL’s X account. Logendran was affiliated with PeggleCrew, a hacker collective known for distributing malware.
Additional evidence links Logendran to a second X account named IDISSEVERYTHING. Accounts registered under this name on various platforms can be traced back to him, according to Sawyer, who utilized open-source intelligence tools to verify these connections.
Logendran has also hinted at his first name and location on X. When he contacted a news outlet for comment, his caller ID displayed as Devesh. Efforts to reach Logendran for further comment have been made.
The Impact of the Leak
In online communities, discussions among superfan hackers often revolve around trading illicitly obtained movies and TV shows. Before the film was widely available, an account believed to belong to the hacker attempted to initiate a bidding war for the leaked content.
ImStillDissin remarked, “There are a lot of vulnerabilities that a lot of people know about and, by and large, there are private communities that swap files and do all this kind of stuff.” He emphasized that multiple individuals had access to the leaked content.
Aidan Rainey, cofounder of cybersecurity firm Alerts Bar, indicated that the leak likely originated from Vision Media. He explained that hackers may have gained access through a flaw in the application programming interface or by stealing login credentials.
Logendran’s previous hacking incident involved a sophisticated scheme where he impersonated a social media director to gain access to the NFL’s Twitter account. He utilized publicly available information to execute the hack, demonstrating a high level of technical skill.
Consequences for Paramount
ImStillDissin acknowledged the unprecedented nature of the Avatar leak, stating that he did not fully consider the consequences. The fallout from the leak may affect the production’s cast and crew, potentially impacting viewership when the film premieres on Paramount+ in October.
Amid the controversy, some critics argue that Paramount missed a financial opportunity by not releasing the film in theaters. A petition to reverse the decision to premiere the film exclusively on Paramount+ garnered nearly 100,000 signatures. Fans expressed disappointment, stating that the film deserved a theatrical release.
As the situation unfolds, ImStillDissin warned that hackers are now targeting the upcoming Avatar series Seven Havens, indicating that the appetite for leaked content remains strong. “There are a substantial number of people who have access to internal stuff like this,” he claimed. “There’s more under the tip of the iceberg.”
As reported by www.hollywoodreporter.com.
Explore the latest digital editions of FAME Delivered in the Magazine section.
Published on 2026-06-04 17:05:00 • By FAME Delivered News Desk