Sony Pictures agrees to pay victims after massive data breach in 2014

Sony Pictures agrees to pay victims after massive data breach in 2014

This month Sony Pictures Entertainment agreed to settle a class-action lawsuit filed by former employees, whose personal information was stolen.

U.S. District Judge R. Gary Klausner approved the agreement that gives roughly 437,000 people impacted by the breach identity theft protection from the time of the 2014 hack through 2017.

Sony Pictures agreed to cover up to $1 million in losses and to set up a fund to cover any additional losses. The exact figure of settlement is not known yet.

After the breach Sony Pictures spent $7 million to notify people affected by the breach and establish a fund to reimburse them for uncovered identity theft losses. And the company invested also $15 million in data breach investigation and remediation.

The massive data breach was a result of the movie “The Interview” and US government blamed North Korea for the attack. Hackers calling themselves Guardians of Peace broke into company computers in 2014 and released thousands of emails, documents and sensitive personal information to WikiLeaks. WikiLeaks went on to release about 170,000 emails, including mails making fun of Angelina Jolie and those containing racially tinged comments about the kinds of films that President Obama may like.

Back to the list

Latest Posts

 Cyber Security Week in Review: June 27, 2025

 Cyber Security Week in Review: June 27, 2025

In brief: Citrix patched actively exploited NetScaler vulnerability, malicious actors increasingly target MOVEit Transfer systems, and more.
27 June 2025
Ransomware attack contributed to patient's death at London NHS Trust

Ransomware attack contributed to patient's death at London NHS Trust

The cyberattack disrupted pathology services and led to over 10,000 cancelled appointments across hospitals and GP surgeries in south-east London.
26 June 2025
Citrix patches actively exploited critical flaw in NetScaler ADC

Citrix patches actively exploited critical flaw in NetScaler ADC

Citrix has confirmed that exploitation has been observed on unpatched systems.
26 June 2025