Sony Pictures Entertainment Inc has agreed to pay for up to $8 million to resolve a lawsuit by employees who maintained their personal data was stolen in an 2014 hacking tied to the studio’s release of a comedy set in North Korea, “The Interview.”
The settlement using current and former workers and the Sony Corp unit was disclosed in documents filed on Monday in federal court in Los Angeles.
Beneath the deal, Sony will pay up to $2.5 million, or $10,000 per person, to reimburse workers for identity theft losses and up to $2 million, or $1,000 per person, to reimburse them for protective measures they took after the cyber attack.
Sony has additionally agreed to pay for up to $3.49 million to cover legal fees and prices, according to court documents. The resolution has to be approved by U.S. District Judge Gary Klausner.
Neither Sony nor a lawyer for the plaintiffs immediately responded to requests for comment on Tuesday.
Sony shelved the wide theatrical release of the film following the hacking, which attracted international attention and surfaced in November. It afterwards offered the picture through digital downloads.
The attack, for which U.S. officials blamed North Korean hackers, wiped out substantial quantities of data and led to the on-line distribution of email, sensitive employee data and pirated copies of new films.
The suit was filed shortly after by former employees who claimed Sony’s negligence caused them economic harm by driving them to beef up credit monitoring to deal with their greater risk of identity theft.
Additionally they said the data breach was an “epic nightmare” for them and thousands of former co-workers.
In June, Klausner rejected Sony’s bid to dismiss the lawsuit, saying the employees could pursue their claims that Sony was not diligent and violated a California confidentiality law.
The case is Corona et al v. Sony Pictures Entertainment Inc, U.S. District Court, Central District of California, No. 14-09600.