Is that still applicable considering Sony is a Japanese company?
Unless Business Insider has Japanese assets or employees that Sony could go after under Japanese law, yes.
Ok, so they could sue non-US sites reposting the hacked information I guess.
They are not a "Japanese company." Sony is a massive corporation in the US. Any company that wants to do business in the US needs to setup US-registered entities. There is no question of jurisdiction here.