Sony confirms data leak affecting nearly 7000 employees

Late last month, Sony was hit with another attack. The leaked data contained details of Sony's SonarQube platform, Creators Cloud certificates, and a device emulator for generating licenses and more. (Representative Image)

Sony Interactive Entertainment has confirmed the data leak in June has affected 6,791 of its employees, whose personal information has been exposed.

According to Bleeping Computer, Sony has sent out notifications to those affected, and has promised full support to tis employees.

Also read | Zee-Sony Merger Case: After IDBI Bank, now Axis moves NCLAT against Zee

The leak occurred in May this year, through a zero-day vulnerability in the MOVEit transfer service that the company was using. Sony is among the many organizations that have fallen victim to this vulnerability.

In June, a ransomware known as ClOp claimed responsibility for the attack. Progress Software, creators of MOVEit told Sony about the vulnerability on May 31. After the warning, Sony discovered a breach had taken place on May 28th, which siphoned 3.14GB of data from an internal testing server in Japan.

The data includes personally identifiable information of US-based employees, and Sony says it will provide credit monitoring services. The company says it has since fixed the issue.

Late last month, Sony was hit with another attack. The leaked data contained details of Sony's SonarQube platform, Creators Cloud certificates, and a device emulator for generating licenses and more.

Also read | Here's how an AI can design robots from scratch

When asked by Bleeping Computer, Sony said it was, "investigating recent public claims of a security incident at Sony. We are working with third-party forensics experts and have identified activity on a single server located in Japan used for internal testing for the Entertainment, Technology and Services (ET&S) business".

Sony said that it had taken the server offline and there was currently, "no indication that customer or business partner data was stored on the affected server or that any other Sony systems were affected. There has been no adverse impact on Sony's operations".