Follow Newser on Twitter   Friend Newser on Facebook
Snappy newsletters. Simple Facebook sharing. Spirited comments. Sweet features are waiting… GET THEM NOW!

Hackers: We've Stolen 1M Sony Passwords

LulzSec claims to have raided Sony Pictures servers

By Rob Quinn,  Newser Staff

Posted Jun 2, 2011 9:55 PM CDT | Updated Jun 3, 2011 7:57 AM CDT

(Newser) – Sony appears to have been hit by the second massive data breach in the space of a few months. A hacker group calling itself "Lulz Security" claims to have broken into servers that run SonyPictures.com and stolen the passwords, email addresses, and other personal data of a million Sony customers, reports the BBC. Customer information posted on the group's website appears to be at least partly genuine, according to the AP, which has contacted several of the customers involved.

"From a single injection, we accessed EVERYTHING," LulzSec said in a statement. "Why do you put such faith in a company that allows itself to become open to these simple attacks? What's worse is that every bit of data we took wasn't encrypted. Sony stored over 1,000,000 passwords of its customers in plain text, which means it's just a matter of taking it. This is disgraceful and insecure: they were asking for it." The group has also claimed responsibility for hacking PBS and posting a fake story about Tupac Shakur still being alive.

Men pass in front of a huge monitor displaying the SONY logo at the Sony building in Tokyo.
Men pass in front of a huge monitor displaying the "SONY" logo at the Sony building in Tokyo.   (AP Photo/Katsumi Kasahara, File)
« Prev« Prev | Next »Next » Slideshow

Sony stored over 1,000,000 passwords of its customers in plain text, which means it's just a matter of taking it. This is disgraceful and insecure: they were asking for it.
- Statement from LulzSec

« Prev« Prev | Next »Next » Slideshow
My TakeCLICK BELOW TO VOTE
43%
10%
4%
9%
13%
21%
To report an error on this story, notify our editors.
A snapshot of the day's best news stories.
 
COMMENTS
Showing 3 of 8 comments
Randall Krause
Jun 3, 2011 8:33 PM CDT
I never use SQL to store passwords. Everything authentication is stored encrypted in plain text files using high level file I/O and comprehensive parameter checking. Never once had any of my sites hacked in over 10 years.
embersyc
Jun 3, 2011 11:04 AM CDT
The point is they hacked the site with SQL injection. If somebody is storing your information in such a non-secure manner it needs to be exposed. They could have taken the info and said nothing, instead they exposed that Sony knows absolutely jackshit about internet security. The very first thing you learn when learning to program for the internet is to prevent SQL injection and always escape any information that is entered into one of your forms. Its like Sony hired somebody's highschool nephew to program the site, because he can totally build websites.
Dr.Gonzo
Jun 3, 2011 10:32 AM CDT
Fucking revenge of the nerds.  Leave those kids alone.  Can't have your meat iff you don't eat your pudding. Why are the criminals acting like they are the good guys?

 
Sony • data theft • hackers • LulzSec • Sony Pictures

More Newser Stories

LulzSec Suspect Nabbed for Sony Pictures Hack

Hackers Hit Sony Again

LulzSec Leader Was Really, Really Eager to Help FBI

LulzSec Hackers Nabbed, Thanks to Own Leader

Police Say They Nabbed LulzSec's Kayla
NEWS FROM OUR PARTNERS
Other Sites We Like:   24/7 Wall St.   |   BuzzFeed   |   Cracked   |   Timelines   |   Geek Sugar   |   Business Insider   |   HuffPost Entertainment