Sony Pictures hacked - list of stolen files released

[furtive]

Sony Pictures was hacked the other day, and the hackers have released a list of the files they have apparently got hold of, and it's not good reading for Sony:

File list said:

- PDF files that apparently contain the passports, visas, and other associated identity documents of cast and crew for various Sony productions, such as actors Jonah Hill, Cameron Diaz, and Angelina Jolie (plus a file called Emmerich, Roland Greencard.pdf).

- Over 700 documents containing passwords, including spreadsheets and Word files titled "FTP passwords", "ResearchPasswords", "ACCOUNTING PASSWORDS", "Personal passwords" and other files named for specific creative resource sites. There is also a file called "CA Breach Notification for User Names and Passwords (MoFo).pdf," which someone at Sony will likely be referring to shortly.

- 179 Outlook archival .pst mailboxes, including the mail folder of an executive at Sony Pictures Releasing Canada, an IT Audit Supervisor at Sony, as well as many "archive.pst" and "backup.pst" files.

- Password protected documents -- with their passwords in their names. (PASSWORD PALABRA SECRETA NISSAN.xlsx, PwC 2007 Report_PASSWORD_pwcemc60.pdf).

- IT audit documents (PASSWORD EQUAL TO USER NAME.xls, ACCOUNTS WITHOUT PASSWORDS.xls).

- Sensitive business documents including film budgets ("JR_Accrued Mktg Cost 0513 - Evil Dead.xls") and contract documents ("Cameron Diaz -- Pre-approved Medical Rider.doc").

- Personal credentials including private key files and 1Password database backups.

- Media files for television shows that aren't Sony Pictures products and may have been pirated copies on an employee's desktop (they look like torrented files)

But the best two are the following:

important files said:

INSURANCE for security breaches.doc
Security Breach Course of Action.v1.txt

Whoops!