Is there any information anywhere of how the intrusion was made? E.g was the admin server for Sony's intranet accessible via remote desktop from the whole internet with the user and password admin/admin? It's a completely different situation than if it consisted of exploiting an unknown vulnerability in SELinux to get remote root access.