Sony Pictures: The data is stolen, then the computers are destroyed

In November 2014, Sony Pictures suffered an intrusion that did not stop with the theft of information. Computers are rendered unusable, while confidential documents and internal communications are disseminated. The company must simultaneously respond to a breakdown and exposure of what should have remained private.

The FBI’s analysis describes software designed to remove data, with close-up features of tools already known. This destructive mechanism differs from a simple encryption with a promise of restoration. Deleting a position can also make it difficult to review what happened there.

The group that presents itself publicly claims the operation and threats accompany the campaign. The background includes the release of the film The Interview. The narrative does not assume that each message received by the company comes from the same identifiable person.

Visible destruction and leaks make the attack immediately concrete for the victim. Sony is engaged in the restoration of its systems and is cooperating with investigators. Repairing computers is not enough to remove all copies of a previously released document.

In December 2014, the FBI attributed the operation to North Korea based on its technical investigation and other evidence. Subsequent U.S. accusations include him in a series of operations connected to Lazarus-associated actors. This government attribution is not worth a comprehensive account of each step of entry.

The spectacular nature of the case lies in the combination of three levers: prevent work, expose secrets and seek to influence a public decision of the company. It is not necessary for a thief to leave with a ransom to cause major damage.