Live on Bloomberg TV

00:00RECENT HACKING INTO SONY'S ENTERTAINMENT DIVISION. THE LATEST INFO AND CLOSE THE SOCIAL SECURITY NUMBERS OF SOME 47,000 EMPLOYEES INCLUDING CELEBRITIES LIKE JUDD APATOW AND SYLVESTER STALLONE. ALSO THEY HAVE PASSWORDS AND HOME ADDRESSES. A GROUP CALLED GUARDIANS FOR PEACE IS CLAIMING RESPONSIBILITY. ARE THEY REALLY BEHIND IT? IS NORTH KOREA PLAYING A ROLE AFTER IT EXPOSED OUTRAGE OVER THE SONY COMEDY," THE INTERVIEW" FOR MOCKING KIM JONG UN. HOW MUCH TIME AND EFFORT DID IT TAKE TO PLAN A HACK LIKE THIS? ON THE ONE HAND, YOU'RE LOOKING AT YEARS AND DECADES OF INFORMATION BUT ON THE OTHER HAND, SOME OF THIS INFORMATION WAS NOT EVEN PROTECTED BY A PASSWORD. >> THAT'S ABSOLUTELY RIGHT. SOME OF THE DOCUMENTS DATE BACK TO 1955. THIS IS FORMER EMPLOYEE RECORDS AND CURRENT EMPLOYEE RECORDS AND LOTS OF INFORMATION. AS FAR AS HOW LONG THIS TOOK, THIS IS NOT SOMETHING THAT JUST HAPPENED IN A DAY. IT TO PLANNING AND EFFORT AND IS DEFINITELY AN ADVANCE CAMPAIGN TO INFILTRATE >> AND EXFILTRATE THE DATA. >>WE ARE LEARNING MORE ABOUT THE NATURE OF THE ATTACKS AND SOME PARALLELS TO ATTACKS ON SOUTH KOREA. DO YOU HAVE A BETTER IDEA OF WHO YOU THINK IS BEHIND THIS? IS IT NORTH KOREA QUESTION MARK >> THERE ARE MANY INDICATORS AND MEDIA SPECULATION REGARDING THE NORTH KOREAN CONNECTION. SO FAR, THE ONLY THING WE HAVE IS THAT THERE IS A MOTIVE AND THAT THERE WAS SOME KOREAN LANGUAGE AND SOME OF THE CODE. I WOULD NOT SAY THAT THAT IS DEFINITIVE PROOF THAT NORTH KOREA WAS INVOLVED IN PARTICULAR GIVEN THE SCOPE OF THE ATTACK. USUALLY WHEN YOU LOOK AT CYBER ESPIONAGE, IT'S MORE ABOUT BEING STEALTHY. THIS IS ANYTHING BUT. THIS WAS ACTUALLY LOOKING TO CAUSE DAMAGE AND EMBARRASSMENT TO SONY. >> WHAT WAS THE TIME IT TOOK TO CREATE THIS ATTACK -- TELL US ABOUT WHO DID IT AND HOW TO PROTECT GLOBAL BUSINESSES IN THE FUTURE? >> IT'S TOO EARLY RIGHT NOW AND SONY IS NOT RELEASING INFORMATION FROM WHAT THEIR INTERNAL INVESTIGATORS ARE FINDING AS TO WHO DID IT. THAT'S UNUSUAL IN THE SITUATION. ALL THE CIRCUMSTANTIAL EVIDENCE IS POINTED TO NORTH KOREA WITH THESE CYBER ATTACKS, IT TAKES A LOT OF IN-DEPTH EFFORT TO UNCOVER ANY SORT OF REAL ATTRIBUTION. TO STOP THIS KIND OF THING, HONESTLY, THIS IS A VERY DIFFICULT THING TO PROTECTING DANCED IF IT IS A NATION STATE. THAT'S JUST THE CURRENT STATE OF INTERNET SECURITY. >> WHAT MAKES THAT'S A MUCH HARDER THAN RUSSIAN HACKERS BACKED BY MILLIONS OF DOLLARS? >> WHEN YOU HAVE CRIMINAL HACKERS COME A COUPLE OF PEOPLE ARE TRYING TO LAUNCH ATTACKS INTO OPERATIONAL ATTACKS. WHEN YOU HAVE A NATIONSTATE COME YOU HAVE HUNDREDS OF PEOPLE DOING RESEARCH AND OF ELEMENT AND CREATING MALWARE FOR ADVANCED CAMPAIGNS. THOSE ARE THINGS THAT WESTERN COUNTRIES AND RUSSIA AND CHINA CAN DO AND POSSIBLY EVEN NORTH KOREA VERSUS A CRIMINAL ENTERPRISE OR SOME HACKING GROUP LIKE ANONYMOUS. THEY ARE NOT THAT ADVANCED ORGANIZED. >> WE ARE GETTING NEW INFORMATION ABOUT ANOTHER HACK ATTACK ON THE WOMEN'S CLOTHING CHAIN. IT SOUNDS LIKE CUSTOMER INFORMATION WAS STOLEN AND POTENTIALLY CREDIT CARD NUMBERS STOLEN. WHAT IS GOING ON HERE? WHY CAN WE STOP THIS FROM HAPPENING? >> THIS TIME LAST YEAR, WE WERE DEALING WITH THE TARGET BREACH. OVER THE COURSE OF THE ENTIRE YEAR, WE HAVE SEEN A NUMBER OF THEM. UNFORTUNATELY, WE WILL STILL SEE EVEN MORE OF THOSE. A LOT OF FOLKS IN THE SECURITY COMMUNITY WERE SIMPLY WAITING FOR WHEN THE NEXT RETAIL BREACH WOULD BE ANNOUNCED PARTICULARLY AROUND THE HOLIDAYS. IT IS JUST A HOT TARGET FOR HACKERS. THERE IS A LOT OF MONEY BEING MADE IN THE UNDERGROUND MARKET AND A LOT OF DEMAND FOR STOLEN CREDIT CARDS. RIGHT NOW, U.S. RETAILERS ARE EASY PICKINGS. >> DB? IS NOTHING SACRED? >> I USED TO SHOP AT BEBE. >> MY CONCERN IS THAT IT'S HARD TO FIGURE OUT WHEN THIS IS A BIG DEAL AND WHEN IT'S NOT. THE SONY THING SEEMED LIKE AN OUTLIER BUT THE STEADY DRUM ROLL OF BEBE AND TARGET THEM ALL THESE PEOPLE, HOW ARE WE TO MAKE SENSE OF WHICH ONES ARE REALLY IMPORTANT AND MORE DANGEROUS THAN THE RUN-OF-THE-MILL HACKING OF A BIG RETAILER? >> CONSUMERS ARE BECOMING DESENSITIZED TO THESE BREACHES. IT'S JUST STANDARD PRACTICE NOW. SOME OF MY FRIENDS HAVE GOT MULTIPLE NOTICES FROM RETAILERS THAT THEY HAVE BEEN BREACHED. HOW DO YOU KNOW WHEN IT IS REALLY BAD OR KIND OF THAT? IT'S HARD TO SAY BECAUSE YOU HAVE TO RELY ON THE ENTERPRISE TO DIEBOLD SAID INFORMATION TO YOU. IT IS JUST A CREDIT CARD NUMBER OR ALL YOUR PERSONAL INFORMATION HAS BEEN TAKEN, MAYBE A MORTGAGE COMPANY MIGHT HAVE MORE INFORMATION THE JUST A RETAILER. BASED ON WHAT KIND OF DATA THEY HAVE ON YOU. >> ONE MORE QUESTION -- AS WE DO THE ONLINE HOLIDAY SHOPPING COME IS THERE ANYTHING SPECIFIC WE CAN DO DIFFERENTLY WHEN I GO THROUGH A TRANSACTION THEY ASK IF THEY WANT TO SAVE MY CREDIT CARD TRANSACTION, I ALWAYS SAY NO, BUT IS THERE ANYTHING ELSE I CAN DO? >> THE BEST THING TO DO IS BE VIGILANT WITH CREDIT CARD STATEMENTS. REALLY T -- REALLY MONITOR ANY TRANSACTIONS EVEN A SMALL ONE. YOU WANT TO INVESTIGATE THAT

No schedule data available.

BTV Channel FinderWatch BTV in your area

Was North Korea Behind Sony’s Cyber Attack? (Video)

More From Bloomberg Technology
All episodes and clips

Bloomberg Markets
"Bloomberg Markets" is focused on bringing you the most important global business and breaking markets news and information as it happens.
More episodes and clips