SONY INTERACTIVE ENTERTAINMENT LLC
bd_ac2e1e883f28b084 · schema v1 · pii pii-v1
Full breach record for SONY INTERACTIVE ENTERTAINMENT LLC →Sony Interactive Entertainment (SIE) disclosed a data breach affecting current and former employees and their family members. The incident occurred between May 28 and May 30, 2023, when an unauthorized actor exploited a vulnerability in Progress Software's MOVEit Transfer platform, a third-party vendor used by SIE. SIE discovered the unauthorized downloads on June 2, 2023, and immediately took the platform offline. The compromised data included personal information such as names, addresses, Social Security numbers, and bank account details. SIE engaged external cybersecurity experts, notified law enforcement, and is offering credit monitoring and identity restoration services to affected individuals.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5964ebb36d9098bbNew Hampshire State AGfiled 2023-10-03Verified
- bd_9166ebc934535cb1Maine State AGfiled 2023-10-03Candidate
- bd_9cc5b58ee8582363Vermont State AGfiled 2023-10-03Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-574585
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 3, 2023
- Raw hash
- 4f9aa64b674f450f2d558291d0e5b9c30529cbbb329f719d6f84f6be96bd4879
Reporting entity
- Name
- SONY INTERACTIVE ENTERTAINMENT LLCnorm: sony interactive entertainment
- Domain
- sonyinteractive.com
Victim entity
- Name
- SONY INTERACTIVE ENTERTAINMENT LLCnorm: sony interactive entertainment
- Domain
- sonyinteractive.com
Incident
- Discovered
- Jun 2, 2023
- Materiality determined
- —
- Notification sent
- Oct 3, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Third party
- via Progress Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 18 weeks(123 days from discovery to filing)
- Compliance flags
- CA 60-day late · 123d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 2, 2023→ Notified: Oct 3, 2023123d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.