Sony has apparently fallen prey to yet another hacking attack in which the personal information of more than 1,000,000 users of its SonyPictures.com web site has been compromised.
This is according to hacking group LulzSec, which claims it obtained passwords, email addresses, home addresses and all of the Sony opt-in data associated with the accounts.
This news comes shortly after Sony confirmed the restoration of its PlayStation Network (PSN), after a hacking attack that led to millions of users' personal details being compromised.
LulzSec insists this latest attack was made to highlight the firm's lax security, pointing out that it was done using a run-of-the-mill SQL injection.
"Our goal here is not to come across as master hackers, hence what we're about to reveal: SonyPictures.com was owned by a very simple SQL injection, one of the most primitive and common vulnerabilities, as we should all know by now," the hacking group wrote in a blog.
"From a single injection, we accessed EVERYTHING. Why do you put such faith in a company that allows itself to become open to these simple attacks?"
LulzSec also claims that all the data it obtained was unencrypted and even customer passwords were held in plaintext.
Have your say on this article
Newsletters
Latest stories from Hacking
You may also like
Hacking jobs
Technology Patent Wars
Case studies from large organisations across all sectors
... And rich media, and flexible working, and peaks in traffic ...
Upcoming Events
Join us for this Computing web seminar, in which the Head of BI at the Co-operative Group Nick Colebourn will be explaining just how he reigned in the Group’s sprawling database estate and how significant savings were realised and data quality improved as a result.
Date: 31 May 2012
Time: 11:00 AM
Live June 13th 11:00am: Register now. During this web seminar we will be looking at the sorts of incidents that can bring data centres grinding to a halt and what can be done about them.
Date: 13 Jun 2012
Time: 11:00 am
Receive the latest jobs direct to your inbox
Are you being paid what you are worth?