We went to bed with the news that the PlayStation Network was fully restored and woke to news of another Sony hack.
This time it’s not the PlayStation Network team sitting with their heads in their hands but Sony Pictures which has hacked hard. LulzSec, a group that has been causing all manner of online mischief recently, has released over a million user logins onto the web and says Sony made stealing them easy…
In a statement posted on its recently registered website and included in a torrent file with details of 750,000 Sony Pictures users, LulzSec says its info grab includes:
Personal information incuding passwords, email addresses, home addresses, dates of birth and all Sony opt-in data associated with their accounts. Among other things, we also compromised all admin details on Sony Pictures (including passwords) along with 75,000 ‘music codes’ and 3.5 million ‘music coupons’
Despite its name, the group says it didn’t hack the Sony Pictures site for the lolz but instead wanted to teach the company another lesson:
Our goal here is not to come across as master hackers, hence what we’re about to reveal: SonyPictures.com was owned by a very simple SQL injection, one of the most primitive and common vulnerabilities…why do you put such faith in a company that allows itself to become open to these simple attacks?
What’s worse is that every bit of data we took wasn’t encrypted. Sony stored over 1000,000 passwords of its customers in plaintext…that is discraceful and insecure and they were asking for it.
The exposed Sony Pictures data appears to affect customers in the US, the Netherlands and Belgium with no indication that users in the UK are affected. LulzSec previously claimed to have hacked systems owned by Fox, grabbing the database of US X-Factor contestants. It also hacked the PBS website earlier this week after the channel broadcast a documentary on Wikileaks.
Despite attacking Sony Pictures, Lulzsec has denied responsibility for the original PlayStation Network hack, writing on Twitter: “”You Sony morons realize we’ve never attacked any of your precious gaming, right?” Sony says it is in investigating Lulzsec’s claims.
How do you feel about the latest Sony hack? Are you losing faith in the firm or is it just unlucky?
