Excel and Word documents plainly expose thousands of computer log-in, financial, and web services passwords, including the Facebook, Twitter, YouTube, and MySpace passwords for hundreds of major motion picture accounts. 
 
 Yesterday afternoon, the hackers behind the massive Sony corporate data hack released a new trove of documents, and it appears that things are only going to get worse for the victim of the most embarrassing and all-encompassing hack of internal corporate data ever made public. Included in the newest data dump is a file directory titled "Password," which includes 139 Word documents, Excel spreadsheets, zip files, and PDFs containing thousands of passwords to Sony Pictures' internal computers, social media accounts, and web services accounts. Most of the files are plainly labeled with titles like "password list.xls" or "YouTube login passwords.xlsx." One file BuzzFeed News found included hundreds of clearly labeled Facebook, MySpace, YouTube, and Twitter usernames and passwords for major motion picture social accounts. 
 
 Advertisement 
 
 Though some passwords appear to be assigned to individual employees and don't include passwords, a number of the passwords to the social media accounts for major films like Ghostbusters, The Social Network, and Easy A appear to be poorly constructed and are not alphanumerical. 
 
 The leak includes usernames and passwords for several corporate news and research services, including Lexis/Nexis and Bloomberg. All told, these subscriptions combined run to tens of thousands of dollars a month. There are also passwords for servers and collaboration services. 
 
 Advertisement 
 
 ​And the story department's passwords for everything from its email to Amazon, Variety, and FedEx. 
 
 ​Another file exposes an individual's passwords for a number of expensive data services. Most of the passwords were simple combinations of obvious nouns and numbers. 
 
 The new files, which were obtained illegally by hackers that some reports say are linked to the North Korean government, are available to download via torrent files, potentially placing this trove of passwords into the hands of any curious hackers, scammers, and criminals. The Sony movie The Interview, starring James Franco and Seth Rogen as journalists who attempt to assassinate North Korean leader Kim Jong Un, is scheduled to be released Dec. 25. When the BBC asked a North Korean representative if the country was responsible for the attack on Sony, a government spokesperson said, "Wait and see." For Sony, this type of security infrastructure is not only highly dangerous but also embarrassing. One of the first and oldest rules of password management and security strongly cautions that users never write down password information. Perhaps most troubling, though, is the prevalence of personal passwords: Amazon, American Express, AIM, Google, and Fidelity passwords that have nothing to do with Sony corporate business have been swept up in the corporate leak. And if the hackers are to be believed, this may just be the second of many massive data dumps. The first two leaks represent only a fraction of the approximately 100TB of data the hackers claim to have taken from Sony. 
 
 Charlie Warzel is a senior writer for BuzzFeed News and is based in New York. Warzel reports on and writes about the intersection of tech and culture. Contact Charlie Warzel at charlie.warzel@buzzfeed.com. Matthew Zeitlin is a business reporter for BuzzFeed News and is based in New York. Zeitlin reports on Wall Street and big banks. Contact Matthew Zeitlin at matt.zeitlin@buzzfeed.com. Got a confidential tip? Submit it here. 
 
 News moves fast. Keep up with the BuzzFeed News daily email! Sign up Great! You're almost there! Check your inbox and confirm your subscription now! ||||| Sony Pictures Entertainment is exploring the possibility that hackers working on behalf of North Korea, perhaps operating out of China, may be behind a devastating attack that brought the studio’s network to a screeching halt earlier this week, sources familiar with the matter tell Re/code. 
 
 The timing of the attack coincides with the imminent release of “The Interview,” a Sony film that depicts a CIA plot to assassinate North Korean leader Kim Jong-Un. The nation’s ever-belligerent state propaganda outlets have threatened “merciless retaliation” against the U.S. and other nations if the film is released. 
 
 The film is a comedy and features actors Seth Rogen and James Franco as celebrity journalists who score a rare interview with the North Korean leader, played by the actor Randall Park. In the film, the journalists are enlisted by the CIA to assassinate Kim. 
 
 Here's the poster for my next movie #TheInterview. pic.twitter.com/TJZ4jGMqdc — Seth Rogen (@Sethrogen) June 11, 2014 
 
 Sony and outside security consultants are actively exploring the theory that the hack may have been carried out by third parties operating out of China on North Korea’s behalf. The sources stress that a link to North Korea hasn’t been confirmed, but has not been ruled out, either. 
 
 The hackers, operating under the name “Guardians of Peace,” or #GOP, left an image bearing a message on the computers screens of Sony employees Monday morning. The message threatened to release sensitive data supposedly stolen from Sony servers if certain demands were not met. 
 
 On Wednesday, some of those files were said to have leaked on the Web by way of a thread on Reddit, though their veracity hasn’t been independently confirmed. The attack is said to have locked Sony Pictures employees out of their computers entirely, forcing them to resort to pen and paper to do their jobs. 
 
 Sony declined to comment beyond a statement it issued Tuesday: “Sony Pictures Entertainment experienced a system disruption, which we are working diligently to resolve.” 
 
 Similarly devastating attacks have been blamed on North Korea in the past. Last year, North Korea was said to have been behind an attack against two South Korean TV broadcast networks as well as its financial system. Employees of the two TV networks were said at the time to be left with blank computer screens. That attack also paralyzed South Korea’s network of ATM machines, preventing people from withdrawing money from their bank accounts.
– The latest document dump in the Sony hack has exposed thousands of the company's passwords for various accounts, reports BuzzFeed. The reason this came to light so quickly? The passwords were kept in a file directory called "Password." Among them are hundreds of usernames and passwords for movies' social accounts on Facebook, YouTube, and Twitter, but also plenty of clearly labeled passwords for everything from Amazon to Fidelity financial services. "Because who needs encryption or security or common sense or even the vaguest attempt at grade-school level online safety," snipes Gizmodo. Hackers have promised to release boatloads of more sensitive information. It's still not certain who's behind the hack, but North Korea today denied responsibility, reports USA Today. "Linking the DPRK (Democratic Peoples Republic of Korea) to the Sony hacking is another fabrication targeting the country," a North Korean diplomat told Voice of America. Pyongyang is miffed at Sony for an upcoming Seth Rogen comedy about a plot to assassinate Kim Jong-Un.