Talk about kicking someone when they're down. Sony Pictures confirmed they had indeed been hacked by LulzSec, a hacker group that had boasted about stealing more than one million user email addresses, passwords, and dates of birth. Sony says the data had been collected by a third-party contractor as part of a free-gift promotion. The promotion required people to enter their email and create a password, but the site for it had been offline for as long as seven years. Nevertheless, it appears to have remained on a Sony server, unencrypted. The latest attack comes after Sony got its online game service back online following an April attack that compromised over 100 million user accounts.