Sony confirms data breach impacting thousands

San Francisco: Japanese electronic major Sony Interactive Entertainment (SIE) has sent notices to some current and former employees, warning that their personal information was compromised in a recent system breach.

Sony has sent the data breach notification to about 6,800 individuals, according to reports.

"We want to provide you with information about a cybersecurity event related to one of our IT vendors, Progress Software, that involved some of your personal information,” the company said in the notice.

This event was limited to Progress Software’s MOVEit Transfer platform and did not impact any of our other systems, Sony clarified.

According to the data breach notification, the compromise happened on May 28 and Progress Software announced a newly discovered vulnerability in its MOVEit file transfer platform, which is used by SIE and thousands of other enterprises around the world.

"On June 2, 2023, SIE discovered the unauthorised downloads, immediately took the platform offline and remediated the vulnerability. An investigation was then launched with assistance from external cybersecurity experts," the company informed.

Sony says the incident was limited to the particular software platform and had no impact on any of its other systems. A ransomware group known as “Cl0p” had claimed responsibility for breaking into a Sony server in June. Sony also launched an investigation last month into a second breach in which hackers acquired 3.14GB of data.