By FileTrekker 2 months ago, last updated 2 months ago
The ransomware group known as Ransomed.vc is claiming to have hacked "all of" Sony's systems, including those tied to the PlayStation platform, and is now trying to sell the stolen data, putting personal data for PlayStation players at risk.
Sony is investigating the hack, first reported by Cyber Security Connect, although the scale of the compromised data stolen, if any, is not yet clear. The hacking group claimed that they "have successfully compromissed [sic] all of Sony systems," adding that "We won't ransom them! we will sell the data. due to sony not wanting to pay. DATA IS FOR SALE ... WE ARE SELLING IT."
However, the "proof-of-hack" data provided by the group was described as "not particularly compelling" by CSC - the group shared a file tree of the stolen data, which totalled less than 6,000 files, particularly small for a company the size of Sony. The proof also included screenshots of an internal log-in page, an internal presentation, and a few Java files.
Ransomed.vc is claiming they will release the data publicly if they do not find a buyer by tomorrow, September 28th. While the group are claiming not to be extorting a ransom from Sony for the data, they are known for doing so in a rather unique way, by threatening to leak personal data that could see the company heavily fined under the European GDPR regulations - the idea being that paying the hackers will be cheaper than the EU's fines.
This isn't the first time Sony has seen breaches in its security, most memorably being hacked back in 2011, when details of more than 77 million PlayStation Network accounts were stolen. That particular hack famously led to the PlayStation Network being offline for over a month.