LulzSec on Thursday announced it hacked servers at Sony Pictures and Sony BMG. The group posted what appears to be the stolen e-mail addresses and passwords of about 50,000 consumers who’d registered for one of three Sony promotional sweepstakes: last year’s “Seinfeld–We’re Going to Del Boca Vista!†giveaway, a January contest Sony conducted with AutoTrader, and another Sony used to promote the film Green Hornet.
The group said in an announcement that it pulled off the hack using a simple SQL injection vulnerability — a common website weakness. LulzSec said that over one million consumer accounts were accessible in the breach, but it wasn’t able to grab all the data “due to a lack of resources on our part.†It tweeted a plea for donations to fund further attacks.
