PlayStation Network (PSN) Outage – Personal info stolen, Credit card numbers possibly
Wednesday, April 27th, 2011If you attempted to use your PS3 this past week on the PlayStation Network (PSN), you discovered that there was an outage and has continued well into this week. This is apparently the first outage of its kind since the inception of PSN. I don’t like to spread misinformation around, so here are the relevant blog posts on the official Sony PSN blog:
- Update on PlayStation Network/Qriocity Services
- Latest Update for PSN/Qriocity Services
- PSN Update
- Update on PlayStation Network and Qriocity (This has all the juicy details on the breach and what you can do about it.)
- Clarifying a Few PSN Points
And the boiled down FAQ.
Basically, a hacker got into the PSN system late April 19, 2011, did a database dump of all PSN accounts, and high-tailed it out of there before anyone could do anything about it. The PSN system went offline April 20, 2011, presumably to prevent others from doing the same thing while they repaired/rebuilt the system. Sony still is not sure whether or not the credit card numbers stored in that system were also stolen but enough information was definitely extracted to create fake identities:
14. What personally identifying information do you suspect has been compromised?
Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information provided by PlayStation Network/Qriocity account holders: name, address (city, state, zip), country, email address, birth date, PlayStation Network/Qriocity password, login, and handle/PSN online ID. Other profile data may also have been obtained, including purchase history and billing address (city, state, zip). If an account holder has authorized a sub-account for a dependent, the same data with respect to that dependent may have been obtained. If an account holder provided credit card data through PlayStation Network or Qriocity, it is possible that the credit card number (excluding security code) and expiration date may also have been obtained.
I saw one comment today from someone who claimed they had unauthorized use of the same credit card they used for PSN happen around the time of the breach. But we’ll probably find out soon enough directly from Sony. It took Sony a few days to get around to telling people what was going on but, after 24 hours, it was already obvious that a security breach took the PSN servers down. Credit card breaches of this nature have serious repercussions, so I’m not terribly surprised that Sony is withholding that information until they are certain.
And, of course, what would be a trust and massive data breach like this be without the class action lawsuit?
This whole ordeal makes me glad I’m a PC gamer.




