Sony comes clean: Playstation Network user data was stolen

Sensitive information about Playstation Network (PSN) users was stolen by hackers during an extensive attack and intrusion on the online gaming network, according to service provider Sony.

It’s a security gaffe of AT&T proportions that showed off some significant vulnerabilities in one of the world’s largest online gaming and content provider networks. Even massive entertainment giants like Sony are vulnerable to security threats in an age populated by highly sophisticated hacking groups that are able to launch major attacks on corporations like PayPal. Sony brought the online network down indefinitely six days ago after hackers found a way to crack into the network, fearing a massive security breach and possible credit card fraud. The company has been silent for the most part — which led backlash from users demanding some kind of response from the company.

“Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information that you provided: name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID,” wrote Sony spokesperson Patrick Seybold in a blog post. “It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have been obtained.”

Sony warned that PSN users should be aware of potential email, telephone and phishing scams that might take advantage of the stolen information. Sony also said that it was unable to confirm that credit card information was stolen, but did not rule out the possibility and told users to watch their bank accounts. The company said the PSN should be back online sometime later this week.

The PSN is a strategic asset for the console maker as more gamers move into the online world and it competes directly with Xbox Live. There are 948 games now available in the PlayStation Network store, as well as 4,000 pieces of add-on content for games. There are also 31,000 movies and TV shows available for download, not counting the content available on Netflix and Hulu.

  • http://twitter.com/Aerocanthus Not My Real Name *TM

    And people call me paranoid using refillable gift “Credit Cards” for any online purchases!

  • http://twitter.com/jayinatlanta J. Ian Irby

    “A security gaffe of AT&T proportions?”Please remember that AT&T's ipad breach only exposed email addresses. Did you actually read what Sony just exposed, before writing that stupid analogy?”name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID. It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have been obtained”That is one HELL of a breach. From now on, we can only refer to such a thing as a breach of SONY proportions.

  • http://profiles.google.com/laylajewels Layla Jewels

    wow

  • http://profiles.google.com/jwrasmussenjr Jamie Rasmussen

    wake up people – don't you see Sony is behind all of this? what better way for them to now come back to all of their users and say they have to charge for their network service because its new and improved and hacker safe. Microsoft makes millions off their users and Sony has been losing their butts by not charging theirs. The time is here…..hacker knocked network down yea right…..remember not that long agao (one year) when their network was down for older consoles but their new thin console was just fine? Last I checked Sony made both consoles and the network – lack of compatibility I'm not buying it and neither should you…

  • http://pulse.yahoo.com/_P7WNELZUZEJF5VLVE5WHSHTOCA JAMES

    Sounds like they are doing to sony what sony did to Geohot…….Taking the information of people that went to his website…..sorry to say but whats good for the goose is good for the gander

  • http://profiles.google.com/kestelia Kezi Sayre

    Uh, actually if that was really Sony's intention. (Which it isn't) That would be a really stupid move because all Sony did was lose trust with 75+million users. This is publicity, but its bad publicity. I think there is a bigger problem to worry about then just getting an annual fee to use their service. They have to now worry about law suits and losing playstation customers over this.

  • http://profiles.yahoo.com/u/EVRXP6PKCKW7S3IIMMRZBC4EPQ LesleyT

    It's funny how Sony appreciates my “patience, understanding and goodwill” even though I have none of those things right now. The security answer theft is a big one because I've probably used the same one elsewhere. I'd change the question on my linked email account, but I don't remember the question I had on PSN. That vulnerability may have existed for nearly a week without any kind of warning, assuming these were the first “intrusions.” But I have to wonder: If the thefts started on the 17th, were they not noticed until the network was shut down on the 20th, or can that 3-day gap be explained by extended circle jerks?

  • HotelRomeo1080P

    You get what you pay for! What's that? It was FREE? Sony, this is the black eye you deserved and it's going to cost you BIG TIME. You have lost the trust of 50+million users, many of whom will pay a price for trusting your service. This is THE EPIC FAIL that you could have avoided prior to the GeoHot BS. My PS3 crashed around the same time this occured, it must have been fate. Sony, you stink, you lie and I hope this puts you under.

  • HotelRomeo1080P

    Sony = Compromised

  • http://pulse.yahoo.com/_GII5NHVPEZEHULKXWILHYIG74A Chris

    thats wat i did lol only thing that was exposed was my info about where i live

  • http://pulse.yahoo.com/_YUVMTLYWCUAH3HUENYCFR77HYU Medek-Medekai

    Already several reports on other forums of people finding huge bills on their credit cards. In short, check your statement! It might save you a headache. Also, I agree this was handled p*ss poorly by Sony. About as badly as they could have handled this. The very least they could do is say “you may want to check your bank accounts, and be wary of phishing and email scams as well, sorry!” . Nope, not even that. Just “please be patient”.

  • http://profiles.google.com/wolfgang12345 Wolfgang ????

    Why did this have to happen right when Portal 2 came out? I want to play online Co-op!

  • kevor

    You got a link to these people finding huge bills on their c/cards? Would be interested to read.

  • http://pulse.yahoo.com/_6E46IYUB4AZL64QK666F427CWY Shannon Hanson

    I agree! If they knew about this the 20th why didn't they tell us this then because now we have given who ever took our information 6 days to do what they want with it, and that isn't smart at all!

  • http://profiles.google.com/reyrocket rey camarillo

    haha thats why i have xbox live :p

  • http://www.life-book.com Life Book

    Yeah, that's just another reason to get an Xbox ;) ) Bad news for sony.

  • http://www.mhmediaonline.eu mhmedia

    “You get what you pay for! What's that? It was FREE?”In some respects yes it was free, but don't forget about the information they held about the victims! Accurate, location-based personal data is like gold dust, and man, they certainly struck gold!

  • http://ugg.jessicadeen.com/news/sony-comes-clean-playstation-network-user-data-was-stolen-venturebeat/ Sony comes clean: Playstation Network user data was stolen | VentureBeat | UberGeekGirl

    [...] Sony comes clean: Playstation Network user data was stolen | VentureBeat. [...]

  • http://venturebeat.com/2011/11/10/valve-steam-service-experiences-security-breach/ Valve Steam service experiences security breach | VentureBeat

    [...] is not the first time a gaming service is targeted in such a breach. Earlier this year, Sony’s online services were hit and shut down in April and remained down partway through the month of May. Back in October, Microsoft’s Xbox LIVE [...]

  • http://spykerc8aileron.crafty5.com/2011/11/10/de-service-steam-de-valve-experiences-atteinte-a-la-securite/ De service Steam de Valve expériences atteinte à la sécurité | Spyker C8 Aileron

    [...] service de jeu est ciblé dans une telle violation. Plus tôt cette année, les services en ligne Sony ont été touchés et fermé en avril et est resté bas au beau milieu du mois de mai. Retour en Octobre, Microsoft Xbox LIVE de service [...]

  • http://www.theubergeekgirl.com/2011/04/28/sony-comes-clean-playstation-network-user-data-was-stolen-venturebeat/ Simplify and manage your entire electronic life with ÜberGeekGirl | ÜberGeekGirl

    [...] Sony comes clean: Playstation Network user data was stolen | VentureBeat April 28th, 2011News Security0 Comments Sony comes clean: Playstation Network user data was stolen | VentureBeat. [...]

blog comments powered by Disqus