Sonny Suffers another Hack Attack

Sony started investigation of LulzSec’s claim about stealing personal information from 1 million accounts at Sony Pictures website.

The group of hackers took advantage of vulnerability on SonyPictures.com and gained access to unencrypted personal information of its users by exploiting a simple SQL injection vulnerability. LulzSec lacked resources to download all the exposed data, so took personal data of only 50 000 Sony Pictures users, including passwords, e-mail addresses and dates of birth.

"What's worse is that every bit of data we took wasn't encrypted," the group wrote in a press release announcing the hack. "Sony stored over 1,000,000 passwords of its customers in plaintext, which means it's just a matter of taking it. This is disgraceful and insecure: they were asking for it."

The siphoned information is now available for download on the web:
http://thepiratebay.org/torrent/6443601

In the past two months over 100 million accounts were compromised after hackers broke into the networks of Tokyo-based Sony. Sony, which yesterday resumed full operation of the PlayStation Network in the U.S. and Europe after six weeks of suspension, said last month the intrusions will cost about 14 billion yen ($173 million) this fiscal year.