Sony Comes Clean- Personal Data Stolen

[Livin in a box]

I'm not going to just copy everything over, but I do suggest you read everything over at PlayStation.Blog here.

Essentially, Sony has admitted what we though for ages- whoever got into the servers took whatever they could in terms of account information and Sony cannot rule out the possibility that credit card information may have been taken too.

They have hired the expertise of an external company to do the investigating and it is looking unlikely that PSN will resume service tomorrow like previously expected; Sony say that it will be up again within a week.

It took them 6 days to tell us this- is that good enough? Should they have told us sooner?

 

[SinHarvest24]

i read this a few days ago somewhere else...

 

[VashTS]

this was told to us a while back by someone. they reported that the information is not encrypted and sent over secure servers. i hope tons of people report fraud and sue the SHIT out of sony. teach them a major lesson for sure.

and to think they could have paid hotz to work on better security after the flaws were found.

 

[doyama]

Seems to add credence to the hack not being part of the ReBug PSN issue, which I always found a rediculous concept.

 

[ShadowSoldier]

i read this a few days ago somewhere else...

Find that hard to believe considering that blog was posted today.

 

[Yuan]

They should have told this EARLIER.

 

[doyama]

this was told to us a while back by someone. they reported that the information is not encrypted and sent over secure servers. i hope tons of people report fraud and sue the SHIT out of sony. teach them a major lesson for sure.

and to think they could have paid hotz to work on better security after the flaws were found.

This has very very very little to do with the security on the client side.

 

[sergster1]

The SECOND sony realized this it should have been reported. Even if it was JUST speculation it SHOULD have been announced that personal data and credit card info may have been leaked. I foresee a HUGE drop in sony's stocks today and I see a class action lawsuit on its way.

 

[Hop2089]

Anyone sense an inside job.

 

[RupeeClock]

They should have told this EARLIER.

You're right, it may already be too late to cancel some credit cards.
In Sony's half-assed attempt to cover this up to save face, they've ultimately lost a lot more.

 

[doyama]

The SECOND sony realized this it should have been reported. Even if it was JUST speculation it SHOULD have been announced that personal data and credit card info may have been leaked. I foresee a HUGE drop in sony's stocks today and I see a class action lawsuit on its way.

You don't know what you don't know. Forensic analysis like this can take weeks even if you throw tons of money at it. Generally the way you approach things from a tech standpoint is that everything is compromised until you know otherwise. then you whiddle down what is and isn't clean. There's really no point in 'speculating' at the beginning, and it also depends on how the compromise was detected. If the intrusion is initially detected on a system that is not storing or communicating with other systems with customer data, then there's no point in even bringing it up since it's not relevant at that time.

 

[Nujui]

I could see someone suing sony over this.

But I think this should have been told ever since the PS3's release.

 

[sergster1]

Rumor has it when sony does get its act together and reboots psn its gonna be a paid service.

 

[RupeeClock]

Rumor has it when sony does get its act together and reboots psn its gonna be a paid service.

Didn't this news just come to light within the past hour or two?
Ahh...the digital age huh? Rumours can spread faster than ever.

 

[LunaWofl]

*sigh* Oh sony, what ever would we do without your crazy shenanigans.

 

[tommzy2]

its both sony and the hackers fault. sony should have encrypted files smarter and made them un modifiable by other people, and the hackers shouldn't do this to Sony. its terrible.

 

[TheDarkSeed]

$ony should know that they cant pull a watergate on us.

 

[MrDiesel]

Pff, hackers have done more evil than good the last few weeks. It's always the same damn song... When will this FINALLY stop?! This is hurting the fucking customers more than helping them...

And this all because of OtherOS that got removed --' Get a fucking PC to fuck with --'

 

[ShadowSoldier]

Pff, hackers have done more evil than good the last few weeks. It's always the same damn song... When will this FINALLY stop?! This is hurting the fucking customers more than helping them...

And this all because of OtherOS that got removed --' Get a fucking PC to fuck with --'

Calm down on the swearing.

Also customers don't have to get a PC if the PS3 was advertised as being able to use OtherOS.

Sony brought this upon themselves. They went lawsuit crazy, took features away from people, and said "oh well". While I don't condone what the hackers are doing, as I said, Sony brought this upon themselves.

 

[RupeeClock]

Senator Richard Blumental of the US is already calling this into question.
http://blumenthal.senate.gov/press/release...18-39E5937C9361
Here's an excerpt.

April 26, 2011

Mr. Jack Tretton
President and CEO
Sony Computer Entertainment America
919 East Hillsdale Boulevard
Foster City, CA USA 94404

Dear Mr. Tretton:

I am writing regarding a recent data breach of Sony’s PlayStation Network service. I am troubled by the failure of Sony to immediately notify affected customers of the breach and to extend adequate financial data security protections.

...

Remember, the security breach was supposedly at April 20th, and it's now April 26th.