310 likes | 502 Views
Sony’s Response to North Korea’s Cyberattack. By: Josh Hogan ITS 360 5/6/2019. https://www.youtube.com/watch?v=k6vtFLfPSMM. Guardians of Peace. November 24, 2014, Sony employees turned on their computers and found something unusual. Why?. Hack was due to the movie called The Interview .
E N D
Sony’s Response to North Korea’s Cyberattack By: Josh Hogan ITS 360 5/6/2019
Guardians of Peace • November 24, 2014, Sony employees turned on their computers and found something unusual.
Why? • Hack was due to the movie called The Interview. • The North Koreans did not like how the movie portrayed their leader Kim Jong Un. • A North Korean website called it a “terroristic threat” and “an evil act of provocation”
What the #GOP Did • About 100 Terabytes of data was stolen from Sony servers. • Stole 47,000 Social Security numbers from current and former employees. • Accessed hundreds of Outlook mailboxes as well as Sony IT audit documents. • Stole movies and placed pirated copies on illegal sharing platforms. • 75% of Sony’s servers had been destroyed and several data centers wiped clean. • Released private data like salaries of executives, people’s passwords, celebrity phone numbers, etc.
What the #GOP Did • Periodically dumped large amounts of information of highly sensitive e-mails and information. • Threatened to issue large terrorists attacks on movie theatres that show the film stating, “We will clearly show it to you at the very time and places The Interview be shown, including the premiere, how bitter fate those who seek fun in terror should be doomed to. Soon all the world will see what an awful movie Sony Pictures Entertainment has made. The world will be full of fear. Remember the 11th of September 2001. We recommend you to keep yourself distant from the places at that time.”
FBI Gets Involved • On Monday, December 1st, the FBI was contacted and officially started it’s investigation into the hack. • Thursday, December 4th, FBI and cyber-security experts find striking similarities between the code used to hack Sony and the code North Korea used to hack South Korean government agencies the year before. • Friday, December 19th, the FBI publicly confirms that North Korea was behind the hack stating, • “As a result of our investigation, and in close collaboration with other U.S. Government departments and agencies, the FBI now has enough information to conclude that the North Korean government is responsible for these actions,” the Bureau said. “North Korea’s actions were intended to inflict significant harm on a U.S. business and suppress the right of American citizens to express themselves.”
The Interview • The movie was set to premier on Christmas Day, but do to the threats, most movie theatres refused to show the film for being in fear of something drastic happening. • Later, the movie was released on streaming platforms such as Netflix and Amazon for people to buy and watch the movie. • Pulling the film from theatres and threatening to shut it down due to terroristic threats made a lot of people upset, including President Obama, stating • Sony “made a mistake” in caving to North Korean hackers. “We cannot have a society in which some dictator someplace can start imposing censorship here in the United States”
More Threats • Sunday, December 21, In its harshest rhetoric to date, and claiming that the U.S. was behind the making of The Interview, North Korea threatens to attack “the White House, the Pentagon and the whole U.S. mainland” after President Obama says the U.S. will “respond proportionally” to North Korea’s cyber attack on Sony Pictures.
Lawsuits • Sony became embroiled in two class-action lawsuits: In the first, two former employees claimed the studio did not work hard enough to spare their private information from the hackers. In the second, similar violations underlining the risks inherent in releasing The Interview. “Sony moved forward with the film, knowing that by doing so, it created an unreasonable risk for Plaintiffs and Class Members,” Between the two suits, the plaintiffs are reportedly hoping to nail Sony for violating the California Data Breach Act, Constitutional Invasion of Privacy, the California Confidentially of Medical Information Act, and the Virginia law on security breaches, as well as for exercising negligence. A third lawsuit claiming negligence came after Sony cancelled the release of The Interview; ultimately saying the studio was most concerned with exercising damage control over its compromised assets, while it should have given employees more immediate notice and protection after the November breach. • They later gave people 1 full year of protection for free
Ethical Issues-Journalists • There are a few ethical issues that came from this event. • There is pressure we can put on the journalists. The information that North Korea put out there would not have been as damaging as it was if it hadn’t been reported on as heavily. Journalists saw a chance to make money by reporting lots of new information on this story because it sparked public interest. In doing so, the public knew of all this leaked information from the journalist and went on a frenzy to uncover any sensitive material they could find about employee pay, sensitive e-mails, and all the others. What they did isn’t criminal, but is ethically wrong.
Ethical Issues- Public • From the publics view, we needed to have some sort of Integrity when it comes to obtaining illegal information and materials. There were movies that were stolen and put on pirating platforms and illegally downloaded by millions. • We could have limited the views on all the sensitive information if it wasn’t being passed around on social media by the public.
Ethical Issues- Sony • There was a lot of blow back on Sony for some of their employees opinions and conversations in emails that were leaked: There was a huge concern over gender pay gap after the documents revealed that Amy Pascal is the only women earning $1 million or more. And in many movies, women actresses were being paid less then male counterparts. • Amy Pascal emails to a co-worker reveals comments about President Obama that were deemed to be racist. • Sony faced many allegations for not being transparent when it came to running there business and dealing with financial records. • All of these things are bad ethical problems that stemmed from Sony being hacked.
Outcome • The U.S. Department of Justice issued formal charges on North Korean citizen Park Jin-hyok on September 6, 2018. • In its first quarter financials for 2015, Sony Pictures set aside $15 million to deal with ongoing damages from the hack.Sony has bolstered its cyber-security infrastructure as a result, using solutions to prevent similar hacks or data loss in the future.
Outcome • Sony has put an estimate to the damage caused by the massive cyberattack against Sony Pictures Entertainment last year at $35 million. • "The figure primarily covers costs such as those associated with restoring our financial and IT systems," a spokesman at Sony's Tokyo headquarters said later.
Solutions • Sony needs to have better cyber security. They were attacked in 2011, which it is reported that they had laid off 2 cyber security workers weeks before that happened. It’s probably to save money but I think they have now learned the lesson that you need to invest more money to be protected. • They need to make sure they are well-prepared to respond to attacks, like making regular backups of their information so they can restore and recover information that was deleted by hackers. • Corporate executives should have the mindset that their decisions and secrets might one day be exposed to the public. They should try to avoid embarrassing emails and lopsided pay scales to prevent future scandals.
Reference • https://www.joc.com/technology/shippers-have-limited-options-protect-against-next-cyber-attack_20170712.html • https://bits.blogs.nytimes.com/2014/11/25/sony-pictures-computers-down-for-a-second-day-after-network-breach/ • https://www.youtube.com/watch?v=k6vtFLfPSMM • https://deadline.com/2014/12/sony-hack-timeline-any-pascal-the-interview-north-korea-1201325501/ • http://time.com/3658133/the-interview-brought-in-31-million-in-digital-sales/ • https://www.vulture.com/2014/12/everything-sony-leaks-scandal.html • https://www.sfgate.com/opinion/diaz/article/Sony-hack-raises-journalism-ethics-issues-too-5969327.php • https://www.vulture.com/2014/12/everything-sony-leaks-scandal.html • https://www.bbc.com/news/world-asia-45522654 • https://www.networkworld.com/article/2879814/sony-hack-cost-15-million-but-earnings-unaffected.html