Sony’s PlayStation unit hit by MOVEit hack

The division of Sony Group behind the PlayStation video consoles and games is the latest American-based organization to publicly acknowledge being victimized by the zero-day vulnerability in Progress Software’s MOVEit file transfer platform.

Sony Interactive Entertainment (SIE) has begun notifying almost 6,800 former employees and family members of current or former staff that their personal data was stolen from the company’s MOVEit system by a hacker at the end of May.

A copy of the letter being sent to affected people and filed with the Maine attorney general’s office has blanked out what personal information was copied. However, the filing notice says the information includes peoples’ name or other personal identifier and their Social Security numbers.

On May 28, before Progress Software announced the vulnerability, a threat actor used the vulnerability to download some SIE files stored on its MOVEit platform, the letter to victims says. SIE discovered the hack on June 2, after which the division took down and remediated the server and notified police.

The Clop/Cl0p ransomware gang has taken credit for discovering and exploiting the vulnerability.

Sony Group is headquartered in Tokyo, but SIE is headquartered in California.

As of today, researchers at Emsisoft estimate that 2,342 organizations around the world have publicly said data on tens of millions of customers, employees, or former employees was directly or indirectly (through their data processors) stolen in MOVEit hacks. That includes over 4 million people whose data was kept by the Colorado Department of Health Care Policy and Financing and 3.4 million mothers and children in Ontario whose data was kept by a registry of newborns.

Experts say that if your organization uses MOVEit, the IT department should assume its server has been hacked.

In the past two years, vulnerabilities in file transfer applications from IBM, Accellion and Fortra have been targeted by Clop/Cl0p and other attackers. And Progress Software’s other file transfer application, WS_FTP, was recently added to the list.

Would you recommend this article?

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.


Jim Love, Chief Content Officer, IT World Canada

Featured Download

Howard Solomon
Howard Solomon
Currently a freelance writer, I'm the former editor of ITWorldCanada.com and Computing Canada. An IT journalist since 1997, I've written for several of ITWC's sister publications including ITBusiness.ca and Computer Dealer News. Before that I was a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times. I can be reached at hsolomon [@] soloreporter.com

Related Tech News

Featured Tech Jobs

 

CDN in your inbox

CDN delivers a critical analysis of the competitive landscape detailing both the challenges and opportunities facing solution providers. CDN's email newsletter details the most important news and commentary from the channel.