
Sony Pictures Entertainment chairman/CEO Michael Lynton and co-chairman Amy Pascal have released this statement, acknowledging the studio was hit by hackers who’ve breached their system and come away with user passwords and other data:
“The cybercrime wave that has affected Sony companies and a number of government agencies, businesses and individuals in recent months has hit Sony Pictures as well. Yesterday afternoon a group of criminal hackers known as “LulzSec” claimed to have breached some of our websites. We have confirmed that a breach has occurred and have taken action to protect against further intrusion. We also retained a respected team of experts to conduct the forensic analysis of the attack, which is ongoing. In addition, we have contacted the U.S. Federal Bureau of Investigation and are working with them to assist in the identification and apprehension of those responsible for this crime.
We deeply regret and apologize for any inconvenience caused to consumers by this cybercrime.”


I wonder why Sony might be trying to get some publicity out of a cybercrime issue…wonder if it has anything to do with a certain movie they have coming out featuring a certain hacker..
Fuck LulzSec. Fuck it up its ass. Get out of your momma’s basement and contribute to society for once in your miserable lives.
Yesterday, the hackers released a statement boasting that they had compromised over 1M user’s personal information, including passwords, e-mail addresses, home addresses, dates of birth, etc.
They then emphasized that “every bit of data we took wasn’t encrypted. Sony stored over 1,000,000 passwords of its customers in plaintext, which means it’s just a matter of taking it. This is disgraceful and insecure.”
Interestingly, nothing in Sony’s counter-release denies the hackers’ claim, nor does it acknowledge any culpability for not encrypting users’ personal data. Instead, they simply beat the “we’re the victims of cybercrime” soundbite.
Um, guys: if you’re taking in users’ personal information…and you’re just leaving it un-encrypted in your database, that’s pretty reckless since it’s completely foreseeable that your system might be hacked at some point.
If anyone ends up the victim of identity theft because of Sony’s recklessness, I would expect lawsuits to follow swiftly.
Louis B. Mayer must be laughing himself silly – wherever he is!
Hopefully the wave of security breaches, especially at Sony companies, will convince companies to NOT STORE PERSONAL INFORMATION IN PLAINTEXT. Holy crap, at first I felt sorry they were being targeted, but now I hope all of their security flaws are exposed, because they clearly have many. It’s really unacceptable.
Maybe they should ask the FBI to find out where the laughs went on a couple of those Mr. Sunshine scripts.
Maybe it’s not a good idea to have prominent hackers arrested in a big show, Sony.
Welcome to the world of regret.
The based on true events movie will be out in July.
Sony was warned about this numerous times and did nothing to prevent tis breach from happening. are you telling me Lynton & Pascal really pay attention to this shit. This is another major strike against Mr. Stringer. There is nobody home there and their arrogance in dealing with this situation is just another example of the lack of direction at the companies headquarters .
Couldn’t agree more. The whole company is a joke, no strategy, no direction. None of the people running the various divisions at Sony have a clue as to how to manage their business.
This could not happen to a better company. Karma is a bitch, isn’t it? Maybe they should have thought twice about laying off all of those IT people. Meanwhile, the Three Stooges, Stringer, Lynton, and Pascal, continue to hem and haw over all of the issues affecting the company. You would think the folks in Japan would get a clue and get rid of these clowns who are ruining what was once a great company.
Oh well, maybe Sony can get a bailout when they go belly-up!
Kasaja, you say it all.
The IT department has had it’s budget slashed over the last 6 years. They’ve outsourced most of their application support and code development to Indian contractors. They’ve gone through 5 CIOs in the last 10 years. Hundreds of IT staffers have been laid off. IT reports to the CFO. Guess what? He doesn’t understand technology and looks at it as a cost center. It very well may be. But it also exposes the company to this kind of breach.
Is this security breach really much of a surprise? The only shock is that it didn’t occur sooner. Nice going Dave Hendler and Steve Andujar!
“We deeply regret and apologize for any inconvenience caused to consumers by this cybercrime.”
Are you F-ing kidding me? “Inconvenience”? What a load of crap. Could that be any more insincere?
They had people’s personal information stored in plain text. And we are supposed to believe that Sony is a leading technology company? I guess that fits into Sony’s “strategy,” make.believe…
It’s make believe that the people in charge of this dinosaur know what they are doing.
“Welcome to the world of regret.”
I already regret of reading your s*itty post. Yeah, blame Sony when cybercrimes happen. and yeah, believe everything that these hackers “report”. Well, Internet IQ is low..
DIDN’T ENCRYPT THE DATA??!!!!!!!!!!
WTF is Stringer, Pascal & Lynton drinking?? Or smoking??
You can’t get much dumber than THIS …
even a highschooler would have told you that you always encrypt sensitive data that hackers would likely come looking for.
This is criminal negligence on the part of Stringer, Pascal, & Lynton. We should start referring to them as ‘The NEW Three Stooges’ … really!
This is no suprise – The simple act is that MOST companies and GOs that have active internet connections can be breached –
There are two main issues – Overpriced consultation firms that appear to have abilities they do not – and overcharge for the service….
And companies unwilling to implement the proper procedures due to eiher cost – or inconvenience
I do security work for my clients, but I an NOT an expert – however I have interacted with so-called professionals that have less knowledge than I do – I have taken on cients that have holes you could drive a truck through – in many instances, it is due to negligence and the system can be made ‘quite’ secure in a couple of hours.
Of course total security requires constant monitoring of all packets to look for patterns – and restricting users internally from doing whatever they want, whenever they want
I have ALSO had CEOs insist on accessing some sites tat i SPECIFCALLY told them were threats…but they wanted to play online poker, other games or look at porn….
Most of these hacks ARE 100% preventable – the remainder can limit the damage substantially – and – of course – encrypt the data
(geez – I even encrypt data in applications we write JUST so it makes the data unusable by competitors’ apps….)
Keep your friends close and your enemies closer. LulzSec is so poor they are asking for donations on twitter to continue their total humiliation of Sony (Sonage). Why not just hire them Sony and put them in-charge of your IT dept. which sounds like it is in dire need of leadership?