Paramount+ Avatar Film Leak Traced to Third-Party Screening Platform

On April 12, an anonymous X account identified as ImStillDissin posted two minute-long clips allegedly from the unreleased Legend of Aang: The Last Airbender. The poster claimed the material had been “accidentally” emailed, though the claim was later disproved. Within 24 hours a full-length copy appeared online, prompting a rapid scramble by Paramount’s legal team to remove the content. Superfans organized watch parties, the film topped Letterboxd’s “popular this week” list, and counterfeit DVDs began circulating on eBay.

Hollywood Reporter

The original Avatar: The Last Airbender series (2005-2008) experienced a resurgence on Netflix, topping the platform’s daily chart for over 60 days in 2020 and ranking third-most-streamed animated show in 2022. In 2021 Nickelodeon launched Avatar Studios to expand the universe, including the upcoming series Seven Havens. The Legend of Aang film, produced for tens of millions of dollars, was slated for an exclusive Paramount+ premiere in October 2026 after a shift away from a theatrical release—a decision that sparked a petition with nearly 100,000 signatures.

Hollywood Reporter

• Paramount Pictures – producer of the film.

Hollywood Reporter

• Vision Media – screening company handling awards-screener distribution for studios, including Paramount.

Hollywood Reporter

• Jason Deadrich – CEO of Vision Media.

Hollywood Reporter

• Jason Sawyer – gray-hat hacker who alerted Vision Media to network vulnerabilities.

Hollywood Reporter

• ImStillDissin – X account that released the clips.

Hollywood Reporter

• Devesh Logendran – Singapore-based hacker identified by OSINT analysis as a possible source.

Hollywood Reporter

• Julia Schoel – animator on the film.

Avatar: The Last Airbender Film: Screening Company Security to Blame?

• Aidan Rainey – co-founder of cybersecurity firm Alerts Bar.

Hollywood Reporter

• April 12, 2026 – ImStillDissin shares two clips.

Hollywood Reporter

• April 13 – Full-length version surfaces online.

Hollywood Reporter

• April 22 – Recorded conversation between Deadrich and Sawyer reveals unknown access to Vision Media’s servers.

Hollywood Reporter

• Early April – Singapore police arrest a 26-year-old man for unauthorized media-server access.

Hollywood Reporter

• April 14-15 – Artists publicly condemn the leak on X and other platforms.

Hollywood Reporter

• Initial clips amassed > 100,000 likes within 12 hours.

Hollywood Reporter

• The film appeared on Letterboxd’s weekly popular list.

Hollywood Reporter

• Counterfeit DVDs continue to be listed on eBay.

Hollywood Reporter

• Petition to reverse the streaming-only release gathered ? 100,000 signatures.

Hollywood Reporter

Analysts note the leak could cannibalize viewership when the film launches on Paramount+ in October, potentially reducing revenue and diminishing promotional momentum for the upcoming Seven Havens series. The incident also highlights security vulnerabilities in third-party screening workflows that handle pre-release content.

Avatar: The Last Airbender Film: Screening Company Security to Blame?

Paramount’s internal investigation concluded the studio itself was not responsible for the breach, shifting focus to external platforms. Vision Media’s CEO, Jason Deadrich, said the company is conducting an internal probe, cooperating with law-enforcement investigations, and has “an extensive remediation plan.” Singapore authorities confirmed the arrest of a 26-year-old suspect for unauthorized server access. Cybersecurity expert Aidan Rainey indicated that most evidence points to Vision Media, likely via compromised login credentials or an API flaw.

Hollywood Reporter

Animator Julia Schoel described the pre-release leak as “undermining the entire effort at its most vulnerable moment,” emphasizing that it harms the film’s reputation and the artists’ future opportunities. Fans on 4Chan and other forums argued the film deserved a theatrical run and criticized Paramount’s decision to release it exclusively on streaming.

Avatar: The Last Airbender Film: Screening Company Security to Blame?

While Vision Media’s CEO acknowledged unknowns about the breach, investigators have not definitively assigned fault to the company. OSINT analysis links the ImStillDissin account to Devesh Logendran, yet authorities have not confirmed his involvement. The precise technical vector—API vulnerability versus stolen credentials—remains unsettled.

Hollywood Reporter

• “I saw it’s just a Paramount+ thing, so I decided I’d troll a little bit” — ImStillDissin, X account holder

Hollywood Reporter

• “Our remediation plan is quite extensive.” — Jason Deadrich, CEO, Vision Media

Avatar: The Last Airbender Film: Screening Company Security to Blame?

• “I validated the steps I had received from a threat actor and confirmed this was a real issue,” — Jason Sawyer, gray-hat hacker

Hollywood Reporter

• “Leaking a movie before release undermines the entire effort at its most vulnerable moment.” — Julia Schoel, animator

Avatar: The Last Airbender Film: Screening Company Security to Blame?

• “There are a substantial number of people who have access to internal stuff like this,” — ImStillDissin, X account holder

Hollywood Reporter

Paramount plans to debut the film on Paramount+ in October 2026 while continuing investigations into the breach. Vision Media is expected to finalize its remediation measures and cooperate with ongoing law-enforcement inquiries. Industry observers warn that the leak may prompt tighter security protocols for future pre-release content, especially for the forthcoming Seven Havens series.

Hollywood Reporter