A hack of Sony Pictures Entertainment has left many employees without access to the network.
Workers on Monday were met with an ominous skeleton image on their PCs, from a group called #GOP (Guardians of Peace), alongside a message threatening to release "top secret" data if undisclosed demands were not met.
According to PCMag sister site Geek.com, #GOP leaked a large ZIP file with two lists detailing the extent of the doxxing. "Most of what's inside appears to be from the Sony Pictures finance department, including the stuff of IT guy nightmares: Excel sheets and ZIP files that appear to be full of passwords," Geek said. "There's even a text file that helpfully lists the last 10 recently used passwords for something at Sony."
A number of Sony-related Twitter accounts also appear to have been breached.
Sony Pictures did not immediately respond to PCMag's request for comment, but told Deadline that the company is "investigating an IT matter."
The image appeared publicly first on Reddit, posted by an anonymous user claiming to be an ex-Sony employee, whose friend shared a screenshot of the threat.
"Warning: We've already warned you, and this is just a beginning," the message said. "We continue till our request be met. We've obtained all your internal data including your secrets and top [secrets]."
Citing an unnamed source at Sony Pictures, Variety said the situation may take up to three weeks to resolve. In the meantime, employees have been instructed to turn off their computers and disable Wi-Fi on mobile devices.
Sony is no stranger to attacks, though. In August, the company's PlayStation Network was taken offline thanks to the efforts of hackers known as Lizard Squad. The same group targeted Sony Online Entertainment President John Smedley via Twitter.
Earlier this week, meanwhile, a hacker group claimed to have infiltrated Sony's PlayStation Network and published gamers' email addresses and passwords of gamers, but Sony denied any hack, The Hollywood Reporter said.
In 2011, Sony's network was hit with a massive outage that included the loss of personal information. It lasted almost a month, and attracted the attention of Congress.