The fun just never ends for Sony, does it? Apparently, Sony’s BMG website in Greece just got hacked by a group called b4d_vipera. With this hack, thousands of user accounts (8,385 users to be exact) was dumped and uploaded to the Internet.

Here is a sample of one, which includes the username, real name, and email address (click to enlarge):



What a nightmare, huh? Especially when you can’t wake up from it! According to The Hacker News, b4d_vipera was able to deface the website (see screen shot below) using SQL ejection menthod.

Here are some additional details from the dumped SQL database:
DB Detection: MsSQL no error (Auto Detected)
Method: GETType:
Data Base: SONYBMG
Table: USERS
Total Rows: 8385
Fields are : u_id, u_usr , u_name, u_pwd , u_company , u_email , u_tel , FOREIGN_DOMAIN , u_regdate , u_lname

At the time of writing, we were not able to access sonymusic.gr. It’s possible that it has been taken offline by Sony.