In May 2011, Sony's PlayStation network was attacked, and hackers reportedly compromised more than 100 million gamers' names, addresses, emails, user names, and passwords. The attack may ultimately cost Sony between $1 and $2 billion directly, and potentially billions more indirectly because of reputational harm as well as costs to consumers and credit card companies. A legal battle has been brewing that includes more than 50 class action lawsuits over who should pay. Discuss: 1: Who should pay? 2: What role should insurance play? 3: Should the U.S. favor a more voluntary or regulatory approach to enhancing cybersecurity? 4: How does this episode color Sony's response to the 2014 cyber attacks?