New Sony Pictures leak appears to contain lists of passwords in plain text, security certificates

Today, we received an email tipping us off to a new leak from GOP, the group claiming to have attacked Sony Pictures last week.

The new dump of files appears to be a collection of Sony’s security certificates, signing keys, private keys for accessing servers and endless lists of passwords in plain-text spreadsheets.

Reportedly found in a folder called “Password,” a huge list of Excel files (many of which are unprotected) contained scores of what appear to be passwords for almost every system imaginable, from phones to AMEX logins and more.

The 💜 of EU tech

The latest rumblings from the EU tech scene, a story from our wise ol' founder Boris, and some questionable AI art. It's free, every week, in your inbox. Sign up now!

One file called “computer passwords” reportedly appeared to contain user credentials for logging onto the corporate network, while another entitled “Social Password Log” contains passwords for movie accounts on social media, which is likely how hackers compromised many movie accounts.

As Sony fights to regain control of its network, the company is attempting to figure out who to point the finger at for the attacks. The latest reports suggest North Korea may be named, however Sony downplayed this in a comment today.

We’ve contacted Sony Pictures and will update if we hear back.