17 December 2014
PA’s John Skipper, cyber security expert, is quoted in an article on the lawsuits Sony Pictures Entertainment is facing from former employees.
John explains that there is the potential for an investigation by regulators if Sony is found to be at fault: “I think they may well have a good basis for a claim if Sony is judged not to have taken reasonable measures to protect personal data. If that is the case, Sony might get in trouble from regulators.”
John goes on to say that if the hack is found to have been perpetrated by a nation state, Sony could argue that there is nothing it could have done to prevent an attack: “Lawsuits are tricky as employees have to prove that they suffered a material loss and while that's down to interpretation of the court, they have to show this - and that Sony didn't take reasonable precautions.”
Commenting on the potential for future hacks during the festive period, John says: “I think there is more to come and that the attacker behind this could have the intent to do deep and permanent damage to Sony as an organisation. I wouldn't be surprised to see a series of leaks of information that they have already gathered - or have been gathering - as it isn't clear if Sony has been able to eliminate the attack.”