Back to the archive

The encyclopedia · Legal & Compliance · Operational decision · 2014

North Korea hacked Sony Pictures over a comedy — and exposed the studio's secrets

The 2014 hack leaked salaries, emails and unreleased films. Sony cancelled The Interview's theatrical release, then reversed course after backlash.

Sony Pictures · 2014-11

What happened

In November 2014, Sony Pictures Entertainment was hit by a devastating cyberattack attributed to North Korea's Lazarus Group. The hackers stole and leaked terabytes of data: employee salaries, private emails, unreleased films, and internal documents. The attack was retaliation for 'The Interview,' a Sony comedy about a plot to assassinate Kim Jong-un.

The leak was humiliating and damaging. Private emails between executives were published, revealing candid and sometimes unflattering opinions about actors and films. Employee personal data was exposed. The financial cost was estimated at over $100 million in remediation, lost revenue and legal settlements.

Sony initially cancelled the theatrical release of 'The Interview' after major theater chains refused to show it, citing security threats. The decision was widely criticized as capitulation to a foreign government's censorship. Sony reversed course and released the film online and in limited theaters. The case became a landmark in cybersecurity, free expression and state-sponsored cyber warfare.

Why it happened

  • Sony's network security was inadequate to prevent a state-sponsored attack, and the response was slow.
  • The initial decision to cancel The Interview's release was seen as capitulation to foreign censorship.
  • The leak of private emails and employee data caused lasting reputational and personal damage.
  • The attack exposed the vulnerability of any company to state-sponsored cyber warfare over content decisions.
What it cost$100M+ in damages; data leak; release reversalcostly

The lesson

Any company that makes content decisions can become a target of state-sponsored cyber warfare. Sony's initial capitulation showed that threats can achieve what no court would order.

Aftermath

Sony released The Interview online and in limited theaters, where it became the company's fastest-selling digital title. The US imposed additional sanctions on North Korea. The case prompted major companies to reassess their cybersecurity posture against state-sponsored threats.

Sources

spotted an error? The club wants to know.

Comments · 0

    Sign in to join the comments.

    More like this

    Somewhere, someone solved the problem this company failed at. 2nd Opinion →