Book extract: ex-Sony Entertainment CEO Michael Lynton recounts his role in sparking North Korea's 2014 hack, one of the worst cyberattacks in corporate history
In an exclusive book excerpt, the former CEO of Sony Entertainment opens up about his role in unleashing one of the worst cyberattacks in corporate history.
Context & Ripple Effects
The new account adds an executive-level perspective to a record that previously emphasized employees’ disruption after the breach and the company’s delayed recognition of its scale. Employees’ accounts of the immediate aftermath made the operational damage visible from inside the studio.
Later coverage argued that Sony Pictures had prioritized avoiding offense and worried about security costs rather than hardening defenses. That reported security trade-off gives Lynton’s retrospective account relevance beyond personal memoir: it bears on how leadership weighed creative, commercial and cyber risks.
First-order effects
- Lynton’s account places a former chief executive more directly in the public narrative around the incident, renewing attention on leadership decisions surrounding the film and its release.
- For Sony, the excerpt reopens a legacy governance question: whether security and crisis planning received sufficient weight when content carried geopolitical sensitivity.
Second-order effects
- Media companies facing politically sensitive releases have a clearer reason to treat release strategy, employee safety and cyber resilience as connected planning problems rather than separate functions.
- The account may sharpen scrutiny of the trade-off described in prior coverage between security spending and perceived risk, especially where a company’s content can trigger external retaliation.
Third-order effects
- If this pattern persists, cyber risk in entertainment will be governed less as a back-office IT expense and more as an enterprise risk tied to editorial and distribution decisions.
- The episode points toward a broader shift in which corporate resilience becomes part of the competitive moat: firms that can sustain operations and protect staff during targeted attacks may face fewer disruptions, though the evidence here is a single high-profile case.
The trend: Geopolitical and reputational exposure is increasingly forcing media companies to integrate cybersecurity into core content and release governance.