Sony Pictures Entertainment experienced a massive computer breach that exposed the personal information of thousands of current and former employees. The group, calling itself Guardians of Peace, released data including thousands of pages of emails from studio chiefs, salaries of top executives, and Social Security numbers of 47,000 current and former employees. Sony offered employees identity protection services through a third-party provider for a year.

The California Office of the Attorney General reported a data breach involving Sony Pictures Entertainment Inc. on December 11, 2014. The breach occurred on November 24, 2014, and involved a cyber attack that may have compromised various types of personally identifiable information, including names, social security numbers, and bank account information. The number of individuals affected is currently unknown.

In 2014, Sony Pictures endured a devastating cyber attack resulting in the leakage of over 100 Terabytes of confidential data, including personal information, unreleased films, and internal communications. The attackers, masquerading as colleagues, sent phishing emails containing malicious attachments. A specific technique used was a fake Apple ID verification email. By combining data from LinkedIn and exploiting reused Apple ID logins, the attackers guessed passwords for Sony's network. Beyond the immediate financial impact, estimated over $100 million, the breach significantly damaged Sony Pictures' reputation, leading to a reevaluation of cyber security practices across the industry. This incident underscores the critical importance of employing strong, unique passwords for different online services and the need for continual vigilance against phishing attempts.