In the e-mail obtained by TheWrap, Lynton and Pascal denounced the attack, which has paralyzed their studio for days, and tried to reassure staff.
“The privacy and security of our employees are of real concern to us, and we are deeply saddened at this concerted effort to do damage to our company, undermine our morale, and discourage us,” they said.
Sony’s computer, email and entire phone system were paralyzed in the hacker takedown that began on Monday, Nov. 24. The studio started to set things right a week later. But that was too late to prevent the Dec. 1 release of a document that purported to show the salaries of top Sony executives earning $1 million or more.
In their memo, Lynton and Pascal called the release of employee information “malicious criminal acts” and said they are working with law enforcement.
Below is the e-mail in its entirety.
Michael Lyntonand Amy Pascal
It is now apparent that a large amount of confidential Sony Pictures Entertainment data has been stolen by the cyber attackers, including personnel information and business documents. This is the result of a brazen attack on our company, our employees and our business partners. This theft of Sony materials and the release of employee and other information are malicious criminal acts, and we are working closely with law enforcement.
The privacy and security of our employees are of real concern to us, and we are deeply saddened at this concerted effort to do damage to our company, undermine our morale, and discourage us. We are enormously proud of the resilience you have all shown in the face of this attack. The company is as busy as ever, and our business continues to move forward, thanks to your great efforts.
While we are not yet sure of the full scope of information that the attackers have or might release, we unfortunately have to ask you to assume that information about you in the possession of the company might be in their possession. While we would hope that common decency might prevent disclosure, we of course cannot assume that.
Yesterday, we told you that we are offering all employees identity protection services with a third-party service provider, AllClear ID, and that you would receive an email tomorrow outlining steps to sign up. If you sign up, the AllClear ID investigators would be available to answer your questions about how to handle disclosures of your confidential information.
We can’t overemphasize our appreciation to all of you for your extraordinary hard work, commitment and resolve.