Hackers: We've Stolen 1M Sony Passwords

Sony appears to have been hit by the second massive data breach in the space of a few months. A hacker group calling itself "Lulz Security" claims to have broken into servers that run SonyPictures.com and stolen the passwords, email addresses, and other personal data of a million Sony customers, reports the BBC. Customer information posted on the group's website appears to be at least partly genuine, according to the AP, which has contacted several of the customers involved.

"From a single injection, we accessed EVERYTHING," LulzSec said in a statement. "Why do you put such faith in a company that allows itself to become open to these simple attacks? What's worse is that every bit of data we took wasn't encrypted. Sony stored over 1,000,000 passwords of its customers in plain text, which means it's just a matter of taking it. This is disgraceful and insecure: they were asking for it." The group has also claimed responsibility for hacking PBS and posting a fake story about Tupac Shakur still being alive. (More LulzSec stories.)