As far as I know, the craigslist hack was a takeover of their DNS. This can be done purely through social engineering, and without some sophistication, it can't lead to lost/compromised data.
This Sony thing seems much more serious, and it also seems like some very sensitive data was compromised.
Of course, we don't know the full story on either of these yet, so I may be very wrong.
