Clues Point to Long-Duration Hack at Sony

The Sony Pictures attack was a prolonged, targeted intrusion that allowed attackers to exfiltrate tens of gigabytes (potentially terabytes) of sensitive corporate and employee data — including emails, HR records and compensation files — and to deploy destructive malware. Leaked credentials and analysis showing malware with hard-coded IPs and stolen credentials indicate long-term access and significant operational compromise prior to the final wiping of systems.