Sony Interactive Entertainment (Sony) has confirmed that their system fell victim to a ransomware attack. The company promptly notified its 6,800 employees about the incident.

This attack occurred after Sony discovered that external actors successfully exploited a zero-day security vulnerability in the file transfer platform they use, known as MOVEit-Transfer. The ransomware gang responsible for this attack is identified as CL0P. According to reports from Bleeping Computer, this group added Sony Group to their list of victims at the end of June.

The ransomware gang managed to exploit this security vulnerability on May 28th and downloaded data from Sony's servers. The company only became aware of the vulnerability a few days later. In response to this incident, Sony launched an investigation with the assistance of external cybersecurity experts and reported the matter to law enforcement.

Although the specific details of the compromised data, aside from the personal data targeted by the ransomware gang, remain unknown, Sony has taken steps to patch the security vulnerability. Additionally, Sony has provided solutions for its employees to protect the affected data. The compromised server contained personal information of employees based in the United States.

Sony is currently investigating this incident and has deactivated its servers. However, the company asserts that this recent incident has "not had a significant impact on Sony's operations," as reported by The Verge.