The recent security breach that crippled Sony Pictures Entertainment internal network last month has done much more harm to the company than anticipated.
An analysis of more than 33,000 leaked SPE documents by data security software firm Identity Finder found that the hacking attack by a group calling itself Guardians of Peace has compromised personal information of more than 47,000 celebrities, freelancers, and current and former Sony employees.
According to the Wall Street Journal, personal information — including salaries and home addresses — of ex-Sony employees who stopped working at Sony as far back as 2000 were also stolen in the attack.
As per the report, Sylvester Stallone, director Judd Apatow and Rebel Wilson were among some of the Hollywood heavyweights to have their personal information, including Social Security numbers, compromised in the attack.
The personal data alongside contracts and other sensitive documents are allegedly being shared over file-sharing networks such as Bit Torrent.
Investigators from Sony Pictures, FBI as well as computer security firm FireEye, have confirmed that Sony’s servers were breached using similar methods to a 2013 attack on a series of South Korean banks and broadcasters.
Responding to the breach on Tuesday, Sony said the attack was a “malicious criminal act” that has left them “deeply saddened.” The company says it will offer a year of free credit monitoring and fraud protection to current and former employees.
Chief Executive Michael Lynton and Co-Chairman Amy Pascal have warned of more leaks in future as they said the company doesn’t yet know what else have been compromised in the breach.