The protected health information of Sony Pictures Entertainment employees may have been compromised in the giant hack and subsequent release of company information, emails and documents, according to a company letter distributed to employees.
On Nov. 24, hackers sent messages to Sony employees telling them they had stolen thousands of gigabytes of company information.
In the letter distributed to employees Dec. 8, Sony writes that they learned "personally identifiable information that SPE received about you and/or your dependents during the course of your employment may have been compromised as a result of such brazen cyber attack."
In addition to identifiable information such as names, addresses, Social Security numbers, driver's license numbers, passport numbers, bank account information, credit card information and employment-related information, the letter indicates "HIPAA-protected health information" may also be compromised, including claim appeals submitted to Sony such as diagnosis and disability codes, health plan member IDs and any health or medical information provided outside of Sony's health plans.
Sony has offered employees one year of identify protection services for free.
More articles on data breaches:
Illinois hospital blackmailed with release of patient data
Stolen laptop prompts data breach notification at Corvallis Clinic
Tribeca Medical Center reports data breach due to stolen records