This isn't strictly true. The thousands stored in a folder called "Passwords" was actually a curated dump of passwords from various parts of the server that the

This isn't strictly true. The thousands stored in a folder called "Passwords" was actually a curated dump of passwords from various parts of the server that the hackers put together and into its own dump -- looking at the data, it doesn't appear the passwords were saved there originally. That's not to let Sony off the hook, however. Plenty of passwords were stored alongside the password protected documents [1] and some of the passwords used were insanely bad (s0ny123) [2]. [1]: http://mashable.com/2014/12/03/sony-hack-4-security-lessons/ http://mashable.com/2014/12/03/sony-hack-4-security-lessons/ [2]: http://mashable.com/2014/12/02/sony-hack-passwords/ http://mashable.com/2014/12/02/sony-hack-passwords/