NEW YORK - The unprecedented hack of Sony Pictures, which a U.S. official says is linked to North Korea, may be the most damaging cyberattack ever inflicted on an American business.
The fallout from the hack that exposed a trove of sensitive documents, and this week escalated to threats of terrorism, forced Sony to cancel release of the North Korean spoof movie “The Interview.” The studio’s reputation is in tatters as embarrassing revelations spill from tens of thousands of leaked email messages and other company materials.
Federal investigators believe there is a connection between the Sony hack and the isolated communist nation, according to an official who spoke on condition of anonymity. The official was not authorized to discuss an ongoing criminal case openly.
North Korea has denounced the “The Interview” but earlier this month said the hack might have been carried out by sympathizers. The movie features a pair of journalists played by James Franco and Seth Rogen who are asked by the CIA to assassinate North Korea’s leader Kim Jong Un.
The attack is possibly the costliest ever for a U.S. company, said Avivah Litan, a cybersecurity analyst at research firm Gartner. “This attack went to the heart and core of Sony’s business and succeeded,” she said. “We haven’t seen any attack like this in the annals of U.S. breach history.”
A besieged Sony on Wednesday canceled the Christmas Day release of the film, citing threats of violence by the hackers and decisions by the largest multiplex chains in North America to pull screenings. The hackers, who call themselves Guardians of Peace, had made threats of violence reminiscent of Sept. 11, 2001, if theaters showed the film.
Sony later said it has “no further release plans for the film.”
“We are deeply saddened at this brazen effort to suppress the distribution of a movie,” Sony Pictures said in a statement.
National Security Council spokeswoman Bernadette Meehan said the U.S. government had no involvement in Sony’s decision. She said artists and entertainers have the right to produce and distribute whatever content they want in the U.S.How much the cyberattack will ultimately cost Sony is unclear.
Beyond the financial blow, some say the attack and Sony’s capitulation has raised troubling questions about self-censorship and whether other studios and U.S. companies are now also vulnerable.
“Artistic freedom is at risk,” said Efraim Levy, a senior financial analyst at research firm S&P Capital IQ. “Are we not going to put out movies that offend some constituencies?”
A breakdown of areas where Sony may suffer damage:
Box office losses
With a modest budget of about $40 million, “The Interview” had been predicted to gross around $30 million in its opening weekend. Doug Stone, president of film industry newsletter Box Office Analyst, forecast that Sony could have grossed $120 million in U.S. and foreign box office revenue from the film. It has already spent tens of millions on marketing.
But Stone said the losses represent a single movie flop, not a spreading corporate disaster. Revenue from Sony Corp.’s pictures business totaled ¥830 billion ($7 billion) last fiscal year. “Disney wrote down $200 million on the “Lone Ranger” and didn’t bat an eye,” he said of the rival studio. “So while it would be a significant hit, it certainly wouldn’t cause a financial collapse.”
Stirred or shaken?
A leaked script of Sony’s upcoming James Bond film “Spectre” led to an online frenzy of articles warning readers of “major spoilers.”
Seth Shapiro, a professor at the University of Southern California’s School of Cinematic Arts, thinks the potential damage from a hit to the blockbuster franchise is big.
“How can they proceed if everyone in the audience has already read the script?” he said. “You basically need to start over and see how much you can salvage.”
Others disagreed, noting that people flooded to movies like “Titanic” though everyone knew the ending. And they question how many people would pore through details of the script anyway. “Most people don’t read scripts,” said veteran publicist Howard Bragman. “The Bond movie is going to do just fine.”
It is not yet clear if the leaks of sensitive emails will cause agents and top actors to think twice about working with Sony.
In the short term, some think it may hurt, not only because of the insults directed at stars such as Angelina Jolie, but because the massive leak hurts prestige and indicates Sony is not being run as well as it should, said Shapiro. “Is Sony going to be the place of first resort for Hollywood A-List? No. Not tomorrow.”But all bets are off if Sony decides to reshuffle the top executives at the studio. Some have speculated that co-chair Amy Pascal’s job might be in jeopardy due to the insensitive nature of some of her remarks in emails.
In an industry based on relationships, major changes at the top can affect projects for years, said Larry Gerbrandt, a principal at entertainment consulting firm Media Valuation Partners. “If the fallout leads to large scale changes at the senior executive level it will have a ripple effect for several years since it brings to halt most movies currently under development.”
Projects have to be written off, replacement executives hired — who will have their own ideas of what movies should be made — and the costs could easily get into the hundreds of millions of dollars, he said.
Earlier this week, four former employees sued Sony for not protecting their private information from hackers. The lawsuits seek class-action status on behalf of the nearly 50,000 employees whose Social Security numbers and other private data were exposed.
Legal experts said the cases are likely just two of many that will be filed over the data breach.”This doesn’t look good for Sony, which after all is a technology company,” said Jonathan Handel, an entertainment law professor at the University of Southern California Gould School of Law.