I'm not going to just copy everything over, but I do suggest you read everything over at PlayStation.Blog here. Essentially, Sony has admitted what we though for ages- whoever got into the servers took whatever they could in terms of account information and Sony cannot rule out the possibility that credit card information may have been taken too. They have hired the expertise of an external company to do the investigating and it is looking unlikely that PSN will resume service tomorrow like previously expected; Sony say that it will be up again within a week. It took them 6 days to tell us this- is that good enough? Should they have told us sooner?