Gadgets


Share
June 08, 2011

Sony Pictures Hack Reveals 37,500 Customer Records


Cyber attacks on Sony continue on as hacker group Lulzsec exposed over 37,500 customer records from Sony Pictures.

Last Thursday, Lulzsec posted on their Twitter account that they had stolen data from Sony Web sites. That same day Sony Pictures "retained outside experts to conduct an investigation and forensic analysis," according to a statement. "In addition, we promptly took offline all potentially affected databases containing personally identifiable information and contacted the U.S. Federal Bureau of Investigation. We are working with the FBI to assist in the identification of those responsible for this crime," Sony added.

The hack resulted in over 1 million users’ personal information being compromised. The group later said that due to financial constraints, it was unable to copy all 1 million records, but posted samples online to prove its authenticity. "In theory we could have taken every last bit of information, but it would have taken several more weeks," the group said.

Sony posted a statement telling customers that some or all of the following information that they may have provided to Sony in connection with certain promotions or sweepstakes may have been obtained by the cyber attack: name, address, email address, telephone number, gender, date of birth, and website password and user name.

Those customers whose information may have been exposed have been notified by Sony. The company notes that it had not requested credit card information, Social Security numbers, or driver's license numbers from those people.

Hackers have chosen Sony as a popular target since it filed a lawsuit against George Hotz for publishing a program that lets users change PlayStation 3 consoles.

Lulzsec has also targeted PBS, FBI-affiliated Web sites, and Nintendo. Earlier this week, it also offered up 54MB of Sony Computer Entertainment Developer Network source code in the hacker group's latest round of what it calls "sownage."

 “Sownage” has been posted and explained on the hacker group’s website. “From a single injection, we accessed EVERYTHING. Why do you put such faith in a company that allows itself to become open to these simple attacks?”

The post continued, "What's worse is that every bit of data we took wasn't encrypted. Sony stored over 1,000,000 passwords of its customers in plaintext, which means it's just a matter of taking it. This is disgraceful and insecure: they were asking for it."


Rachel Ramsey is a TMCnet editorial assistant, contributing news items and feature articles on a variety of communications and technology topics. Rachel has previously worked in PR and communications at The Wriglesworth Consultancy, an award-winning London PR firm. She has also contributed to the creative services department at CBS 3 and The CW Philly in Philadelphia. Rachel is pursuing a degree in journalism and communications at James Madison University. To read more of her articles, please visit her columnist page.

Edited by Rich Steeves
blog comments powered by Disqus

Free Gadgets Newsletter