Breach at Sony

673 Words3 Pages
Sony shut down their network in April 2012 after Sony discovered a massive security breach that involved the theft of data about 100 million accounts. By the time Sony got their PlayStation Network up and running again, the entertainment giant suffered another devastating security breach. Hacker group LulzSec announced via Twitter that it had found a vulnerability in SonyPictures.com leaving 3.5 million Sony Music coupons, as well as data on more than one million of its website users and customers unprotected. The group stole all the data that it could and left the rest, clearly marked, for others to plunder. They posted a statement via pastebin saying: “We recently broke into SonyPictures.com and compromised over 1,000,000 users’ personal information, including passwords, email addresses, home addresses, dates of birth, and all Sony opt-in data associated with their accounts. Among other things, we also compromised all admin details of Sony Pictures (including passwords) along with 75,000 “music codes” and 3.5 million “music coupons”. (Olson, 2012) The hackers use a simple SQL injection technique, and with a single injection were able to access the data. The characteristics of the perpetrators was hacking which is the unauthorized access, modification, or use of computer systems, usually by means of a PC and a communications networks. The breach was not discovered by Sony auditors, as the hackers revealed the breach of the data via twitter. The auditors were able to confirm the breach after days of denial from Sony. This breach of Sony has affected all of Sony’s stakeholders which include Sony shareholders, customers, employees and their board of directors and executive committee. This type of breach is Data Fraud which falls under the Computer Fraud Classifications. Data Fraud is illegally using, copying, browsing, searching, or harming company data. It is

More about Breach at Sony

Open Document