Nicolas Cage film stolen from Netflix sparks $105M lawsuit

The Los Angeles Police Department is now looking into the disappearance of the unreleased war thriller *Fortitude*, a Nicolas Cage‑starring film that vanished from Netflix’s Hollywood headquarters last summer.

The theft was perpetrated by producer and financier Simon Afram, who filed a police report after discovering an unencrypted master copy had been removed from a desk along with other storage drives.

The case has already spawned a $105 million lawsuit in federal court, and the investigation continues to unfold against a backdrop of conflicting statements from Netflix executives and the filmmakers’ legal team.

The details reveal how the film’s handling—through standard digital cinema package (DCP) protocols—may have been compromised, raising questions about security measures at one of the streaming giant’s largest offices.

## Background & Context

*Fortitude* was announced in 2023 as a high‑concept, low‑budget war drama set in a fictional conflict zone. Nicolas Cage was attached to play the lead role of a disillusioned war correspondent, drawing on his long history of intense character work in films such as *National Treasure* and *The Rock*.

The project was produced by Afram’s indie banner, with distribution planned exclusively through Netflix’s global platform.

The film’s journey from script to screen was a textbook example of modern indie distribution: after a successful festival circuit showing at Cannes’ Directors’ Fortnight, Afram struck a deal with Netflix for an exclusive digital release.

The DCP was delivered on a 3 TB hard‑drive bundle that the associate producer handed directly to Netflix’s in‑house post‑production team, following the standard practice of sending unencrypted files for internal review and metadata tagging.

Two months after the master copy disappeared, the filmmakers said they still know as much as they did when the theft first came to light in June.

In a June 25 email, a Netflix executive acknowledged that *Fortitude* had been “stolen” and described the incident as a “breach.” An exhibit in Afram’s lawsuit shows the staffer wrote: “This is a first for us. Unfortunately, someone stole a good amount of drives from our office desks this past week.

We’ve been working through this with our security teams to no luck. Our piracy teams are on high alert with the breach and will monitor.”

Afram filed the police report himself after it was unclear whether Netflix had reported the incident to law enforcement.

The LAPD’s media relations division confirmed that it could not verify or deny a police filing by either party, noting that police had not responded to Netflix’s Hollywood headquarters during the week of the theft—a standard part of the reporting process.

Netflix has said it is conducting its own investigation but declined to share results with the filmmakers.

The lawsuit, filed late last month, alleges “careless and negligent treatment” on Netflix’s part.

In an amended complaint, Afram added defamation claims after Netflix’s statement characterizing the firm as an “extortionist.” The filmmakers maintain that they used industry‑standard safeguards: an associate producer delivered an unencrypted DCP to Netflix at its request and explicitly instructed that the files be deleted after screening.

## What People Are Saying

Insiders close to the project have voiced frustration over the lack of transparency. “Eight weeks of internal investigation, what’s the result? No police report filled by Netflix, insurance not informed nor involved.

Why?” one source told us. The same insider questioned security protocols: “What happened with the camera footage, security protocol? How was it possible to keep such valuable assets without security measures on an open office desk?”

The filmmakers’ production insurance company is conducting its own inquiry and has reached out to Netflix, but the streaming service allegedly has not responded to insurers. Industry peers expressed alarm at the case, noting how common DCPs are in indie sales and how devastating it would be to have a film stolen before release.

The lawsuit’s August 4 amendment added “defamation” after Netflix’s “extortionist” remarks, a move that has drawn further scrutiny.

Netflix’s own statement disputes any claim that it bears risk of loss for a film delivered without proper safeguards, and it emphasizes that it does not own the rights to *Fortitude*.

The company said it was monitoring piracy sites and had declined to share investigative details with Afram’s law firm because of “hostile attempts to extort money,” which included a demand of $165 million for the film.

### Fan Reaction

Nicolas Cage’s legion of fans quickly jumped onto social media, expressing a mix of disbelief and solidarity. Threads on Twitter and fan forums featured screenshots of the lawsuit filing, memes about “Cage vs.

The Corporate Goliath,” and heartfelt messages urging Cage to “protect your art.” The hashtag #SaveFortitude trended in niche cinema circles, with fans sharing clips from Cage’s previous war‑genre roles and speculation about how *Fortitude* would have expanded his filmography.

Fans also highlighted the broader cultural loss: if a film like *Fortitude* never reaches audiences due to theft, it not only deprives viewers of fresh storytelling but also erodes trust in the industry’s ability to safeguard creative works.

Some fans organized virtual watch parties for Cage’s earlier projects, hoping to keep his legacy alive while the legal battle rages.

## Technical Aspects: The DCP and Security Implications

A digital cinema package (DCP) is a collection of files that contain all the necessary components to project a movie on a digital cinema server. It includes video and audio streams encoded in standard formats, subtitles, and metadata for playback control.

DCPs are typically stored on encrypted hard drives or solid‑state storage, with access restricted to authorized personnel.

In this case, Afram’s associate producer delivered an unencrypted DCP to Netflix’s post‑production team, . The production had explicitly instructed that the files be deleted after an internal screening. This process is not uncommon in the industry, especially when dealing with smaller budgets and tight deadlines.

However, it places a higher burden on the receiving party to maintain rigorous security protocols.

Netflix’s current security framework includes access control systems, CCTV coverage, and a dedicated cybersecurity team. Yet the *Fortitude* incident suggests possible gaps: whether in physical safeguards around desk space, in personnel training regarding confidential data handling, or in real‑time monitoring of asset movements.

The lawsuit alleges that these lapses allowed an insider to extract the drives unnoticed.

If the LAPD investigation confirms negligence on Netflix’s part—such as failure to report a theft promptly, inadequate logging of drive removal, or insufficient surveillance footage—the court may find that the streaming giant breached its contractual duty to safeguard the master copy.

Conversely, if evidence shows that Netflix complied with all industry standards and that the theft was carried out by an external party with no access to the office, Afram’s claims could be weakened.

## Industry Impact

The *Fortitude* case arrives at a critical juncture for streaming platforms and independent filmmakers. As studios increasingly shift distribution to digital channels, the line between content creation and content delivery blurs.

A growing number of indie productions are now partnering with large streaming services that promise global reach without the overhead of theatrical release.

This partnership model has inherent security challenges. Films often transit through multiple hands—producers, post‑production houses, digital delivery providers—before landing on a platform’s servers. Each touchpoint is a potential vulnerability.

The *Fortitude* theft highlights the need for stricter protocols: encrypted transport, chain‑of‑custody documentation, and robust access controls.

the lawsuit’s defamation and extortion claims raise questions about how platforms communicate breaches to stakeholders. Transparent reporting can mitigate reputational damage, but it may also expose the platform to legal liabilities if the claims are not substantiated.

Streaming services may respond by tightening contractual clauses around confidentiality, insurance requirements, and data handling.

For independent filmmakers, the incident underscores the importance of securing comprehensive insurance that covers theft of digital assets. While many producers already rely on specialized film insurance policies, the *Fortitude* case may prompt a reevaluation of coverage limits and terms related to intellectual property loss.

The case could also influence future negotiations between creators and platforms. Producers may seek contractual assurances that any delivered master copy will be stored in an encrypted format until final approval, or that the platform will conduct a forensic audit upon receipt.

Platforms, meanwhile, might adopt more stringent data‑handling protocols and invest in better physical security for their offices.

## What Happens Next

Afram filed the initial lawsuit on July 29 in California’s Central District, alleging breach of contract. The complaint accuses Netflix and its attorneys of refusing to answer questions about the theft’s circumstances, the status of the DCP, or whether a police report was filed.

The case has already prompted Netflix to deny responsibility for the theft and to reiterate that it does not own the film.

The ongoing LAPD investigation may bring new evidence into the lawsuit’s arguments. If police determine that Netflix failed to report the theft or mishandled security protocols, it could strengthen the filmmakers’ claims of negligence.

Conversely, if the investigation finds no lapses on Netflix’s part, the court may dismiss some of Afram’s allegations.

Meanwhile, both sides are expected to continue negotiating around insurance coverage and potential damages. The legal battle is set to unfold in federal court, where the outcome could have broader implications for how streaming platforms handle pre‑release content and secure its intellectual property.

The case remains a stark reminder of the fragile intersection between creative production and corporate security in the digital age, especially as the industry moves further into an era where every frame is stored, transmitted, and streamed with unprecedented speed and reach.

The resolution will set precedents that may shape the future of how film assets are protected and how agreements are drafted in a world where the line between creation and distribution has never been more blurred.