Two former Sony employees have filed a lawsuit against Sony Pictures Entertainment, a company they claim “failed to secure its computer systems, servers, and databases, despite weaknesses that it has known about for years,” according to the lawsuit obtained by EW.
The lawsuit describes the recent hack “an epic nightmare, much better suited to a cinematic thriller than to real life.” Thanks to the hackers—who have yet to be identified—sensitive information about employees past and present has been released, including Social Security numbers, salaries, and personal emails.
According to the lawsuit, Sony knew about its systems’ weaknesses but “made a ‘business decision to accept the risk’ of losses associated with being hacked'” and “owed a legal duty to [employees] to maintain reasonable adequate security measures”—a duty that the plaintiffs say the company ultimately didn’t fulfill.
Michael Corona, who worked at Sony Pictures Entertainment between 2004 and 2007, and Christina Mathis, who worked at Sony Pictures Consumer Products from 2000 until 2002, are the plaintiffs in the case. They’re asking Sony for damages, as well as relief including bank monitoring and identity theft insurance for at least the next five years.
Sony did not immediately respond to EW‘s request for comment.