Sony Hack Exposed Personal Data of Hollywood Stars

[InfoSec News <alerts () infosecnews org>]

http://online.wsj.com/articles/sony-pictures-hack-reveals-more-data-than-previously-believed-1417734425

By BEN FRITZ and DANNY YADRON
The Wall Street Journal
Dec. 4, 2014

The hack at Sony Pictures Entertainment revealed far more personal 
information than previously believed, including the Social Security 
numbers of more than 47,000 current and former employees along with 
Hollywood celebrities like Sylvester Stallone.

An analysis of 33,000 Sony documents by data-security firm Identity Finder 
LLC found personal data, including salaries and home addresses, posted 
online for people who stopped working at Sony Pictures as far back as 2000 
and one who started in 1955.

The hack and subsequent posting by a group calling itself Guardians of 
Peace illustrate the risks large companies like Sony take by amassing 
years of digital records on employees and customers on machines connected 
to the Internet. Much of the data analyzed by Identity Finder was stored 
in Microsoft Excel files without password protection.

The documents, reviewed by The Wall Street Journal, also contain the 
Social Security numbers or taxpayer-identification numbers of thousands of 
freelancers, including actors who appeared in movies and TV shows produced 
by the Sony Corp.-owned studio, one of Hollywood’s largest. Among them are 
Mr. Stallone, director Judd Apatow and Australian actress Rebel Wilson. 
Representatives for the three stars declined to comment.

[...]

--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/