They have the malware and the malware basically wrecked all of Sony's Entertainment. The reason why everyone keeps saying it was a disgruntled employee was because unless someone spent a lot of time gathering information on Sony's IT infrastructure, unless you didn't in which case you would need intimate knowledge of the infrastructure.

The timeline for North Korea doing this or hiring someone to do this is off. They would've had only 3 months to put together the project.