As Sony Pictures Entertainment Inc. battles a raft of class action suits filed after a massive cyberattack exposed confidential employee data, some experts are suggesting the hacking looks more like an inside job involving an ousted worker.

Exactly who attacked Sony could have a significant bearing on how general counsel advise their companies to defend themselves from cyberattacks. Do they need to gear up more to catch in-house data thieves or to repel outside attackers?