Sony Breach May Have Exposed Employee Healthcare, Salary Data
Summary: According to multiple sources cited by Krebs on Security, the Sony Pictures Entertainment break-in stole more than 25 gigabytes of data on tens of thousands of employees, including Social Security numbers, medical and salary information, with files traded on torrent networks containing a global employee list and a spreadsheet with base salary and date of birth for more than 6,800 individuals. The FBI released a restricted Flash Alert warning of an unnamed attack group using malware that wipes hard drives and the master boot record, with a Korean language pack referenced by the malicious files, while unnamed investigators cited in other reports pointed to North Korean hackers in a claim that could not be independently confirmed.
What you should know: More than 25 gigabytes covering tens of thousands of employees - SSNs, health savings account data, salary and tax records - is the exposure a security leader has to answer for, and the FBI alert notes that by the time the beacon traffic is detected, the destructive wiping of files has already begun.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026