Sony Pictures settles lawsuit over hacking

Sony Pictures Entertainment has reached an agreement to resolve a class-action lawsuit from former employees whose personal data were exposed in last year’s devastating cyberattack.

Terms of the settlement were not disclosed, and are subject to approval by U.S. District Court Judge Gary Klausner in Los Angeles.

“Plaintiffs and SPE reached an agreement in principle to settle all of the claims of the putative class against SPE,” the plaintiffs’ lawyers wrote in a court document filed Wednesday.

A representative for Culver City-based Sony Pictures declined to comment, and attorneys for the plaintiffs did not respond to requests for comment. The former employees have until Oct. 19 to file a motion for preliminary approval of the proposed settlement, the filing said.

Multiple plaintiffs filed complaints alleging that the company did not do enough to protect them from the data breach that shut down the studio Nov. 24. The lawsuits were later consolidated into a single case listing nine named former Sony workers.

The original suit filed in mid-December said Sony failed to secure its computer systems, servers and databases, and subsequently did not protect confidential employee information such as Social Security numbers and health insurance records.

The plaintiffs have been seeking class-action status. Sony filed an opposing motion in August, arguing that the claims didn’t merit class-action certification.

Sony had previously tried to have the suit dismissed, but the court rejected that request in June and allowed the case to proceed.

“Once the judge decided that the plaintiffs here had standing to bring the case, that may well have incentivized Sony to think about settling,” said Scott Vernick, partner and head of the data security and privacy practice at Fox Rothschild.

U.S. authorities blamed North Korea for the attack that unleashed private information of tens of thousands of current and former Sony employees onto the Internet.