It was reported that “all Sony systems” were compromised by the New Ransomware Group – Sony

The group claims to have gained access to Sony’s internal systems and obtained approximately 6,000 files.

Ransomed.vc stated that it has successfully hacked into all Sony systems and will not demand any additional data ransom from Sony. Instead, they plan to sell it, citing Sony’s unwillingness to pay a ransom. The hackers provided details about the hack, including screenshots of Sony’s login page and internal documents.

The leaked files are said to contain build logs, Java code, HTML data and more, some of which are in Japanese. Although a price has not yet been set, Ransomed.vc has left its contact information with Sony and plans to release the data publicly on September 28 if an agreement is not reached.

Interestingly, Ransomed.vc appears to operate as a combination of ransomware and a ransomware-as-a-service provider. Besides major corporate breaches, they are said to alert companies to vulnerabilities and data privacy breaches, and take advantage of laws like the GDPR to pressure victims.

Sony has not yet publicly acknowledged the reported breach or Ransomed.vc allegations. However, if true, this would not be Sony’s first major hack since the PlayStation Network was hacked in 2011, exposing 77 million accounts. Sony offered compensation to affected users for years afterward.

Although less serious than the PlayStation Network incident based on the number of files, each breach presents serious security concerns.