Sony Interactive Entertainment (SIE), the video games arm of Sony Group Corporation, informed about 6,800 current and former employees of the company that their personal information may have been compromised through a data breach.
According to media reports, the source of the breach, which happened earlier this year, was a file transfer app called MOVEit.
A Bleeping Computer report said Sony assured all support to those affected by the data breach.
Progress Software, which built MOVEit Transfer, had alerted its clients, including Sony, about a vulnerability on its platform on May 31. SIE discovered after the warning that the breach had taken place on May 28. The data accessed by hackers included personal identification information of US-based employees.
"On June 2, 2023, (we) discovered the unauthorized downloads, immediately took the platform offline, and remediated the vulnerability," Sony told employees in a letter.
"An investigation was then launched with assistance from external cybersecurity experts. We also notified law enforcement," the letter further said.