QuoteSony: Hacker stole PlayStation users' personal info
(CNN) -- A hacker has obtained the personal information of PlayStation Network account holders and subscribers of the Qriocity streaming service, Sony said in a message to customers Tuesday.
Sony's investigations over the past week determined that an "unauthorized person" had obtained users' names, home addresses, e-mail addresses, birth dates and passwords, according to a statement being sent to all account holders.
The attack also has crippled Sony's PlayStation Network, which has some 70 million subscribers and has been down since April 20. The network lets customers download video games from the Web and play against each other online.
"While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility," said Sony Computer Entertainment and Sony Network Entertainment, which manage the two services, in a joint statement.
The hacker could have taken credit card numbers, card expiration dates, billing addresses, answers to security questions and purchase history, but not credit-card security codes, they said.
Sony is encouraging customers "to protect against possible identity theft or other financial loss" by reviewing credit-card statements. The company also suggested that some customers may want to place a "fraud alert" with credit bureaus.
Sony did not say how many accounts had been compromised. A spokeswoman declined to comment Tuesday.
Some subscribers reacted angrily to the news.
"You waited a WEEK to tell us our (personal) information was compromised?" one PlayStation user wrote on a Sony blog. "That should have been said last Thursday" -- the day when Sony first acknowledged the issue.
The intrusions occurred between April 17 and 19, according to the statement. On April 20, Sony switched off the PlayStation and Qriocity online services, which have remained in the dark.
Users and paid subscribers were also mostly in the dark until Tuesday about the reason for the lengthy outage or about when services would be reinstated.
Sony initially said its PS network would be be back online within one to two days.
On Tuesday, PlayStation spokesman Patrick Seybold wrote in a statement that it could take another week before they "expect to restore some services."
They should just say they're solly and get it over with.
Didn't get no email.
70 million! Wow that must be the biggest one yet.
I only recently got a PS3, just in time to have my info stolen. :showoff:
I was wondering why it kept telling me the last few days that it was undergoing "maintenance"
That's why I stick with Microsoft.
I can't use an EU credit card for the US PSN so the damage would be limited in that area.
QuoteSony begins restoring PlayStation after security breach
TOKYO (Reuters) - Sony said it had begun restoration of its PlayStation Network games service on Sunday, almost a month after a massive security breach of the network forced the company to shut it down.
Gamers and security experts had criticized Sony for its handling of the incident, which sparked lawsuits and cast a shadow over its plans to combine the strengths of its content and hardware products via online services.
The Japanese electronics and entertainment giant apologized to customers for the outage, and said a range of new security measures had been introduced. These included an early warning system that could alert the company to any attempt to penetrate the network.
"I can't thank you enough for your patience and support during this time," Sony No. 2 Kazuo Hirai said in the news release, which was also posted as a video message on the PlayStation Network blog.
"We are taking aggressive action at all levels to address the concerns that were raised by this incident, and are making consumer data protection a full-time, companywide commitment."
A single message from a PlayStation Network user under the name SG-1_F-302 on the blog read simply: "Thank you Sony!!!!"
But some users have said the prolonged outage has prompted them to switch to rival Microsoft's Xbox Live games service.
In what is thought to be the biggest security breach of its kind, hackers accessed personal information on 77 million PlayStation Network and Qriocity accounts, 90 percent of which are in North America and Europe, and may have stolen credit card information.
Hackers rented a server from Amazon for the attack, Bloomberg news said earlier in the day, citing a source with knowledge of the matter.
Sony discovered unusual activity on its PlayStation Network, which enables games console owners to download games, chat with friends and pit their skills against rivals, on April 19.
It shut down the network and its Qriocity online music and movie service, frustrating many users, but waited almost a week before alerting users to the extent of the security leak.
The company later found out that a separate online games service had also been penetrated, allowing access to another 25 million user accounts.
PROCESS TO BE COMPLETE BY MAY 31
Sony said the restoration of PlayStation Network and Qriocity online movie and music services would take place on a country by country basis and that it expected the process to be complete by May 31.
Sony Online Entertainment services are also being restored and customers will be offered free game time as compensation for the outage, the company said.
Sony also said it had appointed an acting chief information officer to oversee security on its networks.
The attack on Sony is the highest-profile of a series that have affected large corporations in recent months, fuelling doubts about the security of cloud computing services.
"During the past 18 months, we've seen a dramatic rise in the volume of cyber attacks, their sophistication and their impact on businesses," Sony quoted Francis deSouza of Internet security company Symantec as saying.
Japanese games company Square Enix, known for the Final Fantasy series, said on Saturday that hackers had accessed one of its websites and obtained information, including up to 25,000 customer e-mail addresses and possibly job applicants' resumes.
You'd think a company as big as Sony would've already had a CIO.
Quote from: garbon on April 26, 2011, 11:49:39 PM
I only recently got a PS3, just in time to have my info stolen. :showoff:
I was wondering why it kept telling me the last few days that it was undergoing "maintenance"
I missed out on that fun. I got one this weekend, just in time for PSN to be back online.