HACKINTOSH.ORG | Macintosh discussion forums

Sony confirms data breach affecting nearly 7,000 employees

<p>Sony Interactive Entertainment (SIE) has warned around 6,800 current and former employees that their personal data was accessed via a data breach, according to a <a data-i13n="cpos:1;pos:1" href="https://www.documentcloud.org/documents/24005170-sample-individual-notice-10032023?responsive=1&amp;title=1">letter[/url] seen by <a data-i13n="cpos:2;pos:1" href="https://www.bleepingcomputer.com/news/security/sony-confirms-data-breach-impacting-thousands-in-the-us/">Bleeping Computer[/url]. The nature of the personal information stolen by hackers was redacted, but the company stated that a file transfer app called MOVEit was the source of the breach. It's the second report of an attack on Sony's operations within the last two weeks.</p>
<p>A ransomware group called CL0P claimed credit for the attack on May 28th, and MOVEit's vendor Progress Software notified Sony about the vulnerability on May 31st &quot;On June 2, 2023, [we] discovered the unauthorized downloads, immediately took the platform offline, and remediated the vulnerability,&quot; Sony states in the letter to employees. &quot;An investigation was then launched with assistance from external cybersecurity experts. We also notified law enforcement.&quot;</p>
<span id="end-legacy-contents"></span><p>The hackers reportedly gained access to personally identifiable information about US employees, so Sony is providing credit monitoring services to those affected.&nbsp;</p>
<p>Sony was <a data-i13n="cpos:3;pos:1" href="https://www.engadget.com/sony-investigates-the-alleged-data-breach-that-has-led-to-hacker-infighting-161559960.html">victim of another breach[/url] first reported last week. In that case, the hackers accessed servers in Japan used for internal testing for its Entertainment, Technology and Services business, pilfering 3.14GB of data. A threat actor called Ransomed.vc <a data-i13n="cpos:4;pos:1" href="https://www.cyberdaily.au/commercial/9600-ransomed-vc-group-claims-hack-on-all-of-sony-systems">took credit[/url] for the attack, but that was denied by another group calling itself MajorNelson, which posted a sampling of files as proof. Sony said it was investigating the attack, adding &quot;there has been no adverse impact on Sony's operations.&quot;&nbsp;</p>
<p>The company's PlayStation network was <a data-i13n="cpos:5;pos:1" href="https://www.engadget.com/2014-07-23-playstation-lawsuit-settlement.html">attacked in 2011[/url], and Sony Pictures was famously hacked in 2014, resulting in a massive leak of documents and content — including <a data-i13n="cpos:6;pos:1" href="https://www.engadget.com/2016-07-29-sony-sued-for-not-preventing-piracy-of-movie-leaked-in-2014-hack.html">entire films[/url].&nbsp;</p>This article originally appeared on Engadget at https://www.engadget.com/sony-confirms-data-breach-affecting-nearly-7000-employees-075945888.html?src=rss

Source: Sony confirms data breach affecting nearly 7,000 employees (https://www.engadget.com/sony-confirms-data-breach-affecting-nearly-7000-employees-075945888.html?src=rss)