Sony Playstation Network Breach

April 27th, 2011

Sony Playstation Network Breach

Sony has released a statement that the security breach of its PlayStation Network may have exposed the credit card information of paid subscribers.

In an April 26, 2011 blog post on the Sony PlayStation site, the company warned that an unauthorized person was believed to have obtained the names, addresses, email addresses, birth dates, and PlayStation login information of registered account holders. Sony has not yet said how many accounts have been compromised, but Cnn.com reports that the PlayStation Network has over 70 million subscribers.

Although there was no evidence as of the date of the blog post that credit card information had been stolen, Sony is taking extra precaution and warning users that this information may have been obtained as well.

For now, Sony has shut down their PlayStation Network and is working to rebuild it. If you are a PlayStation Network subscriber, you should expect an email from Sony detailing the breach.

Who was breached?

Sony is sending an email out to all registered PlayStation Network account holders. While the company has not yet said how many accounts have been compromised, Cnn.com reports that the PlayStation Network has over 70 million subscribers.

What information was obtained?

The names, addresses, email addresses, birth dates, and PlayStation login information of subscribers. While there is no evidence as of April 26, 2011 that credit card information was taken, Sony is taking extra precaution and warning users that this information may have been obtained as well.

How will this affect me?

According to Sony, they are sending emails to their Sony PlayStation Network subscribers with further information. As always, it is recommended you do not share your personal information in emails, even if the email looks like it came from a reputable source.

Who stole this information?

At this time, no one has claimed responsibility for this breach. It is believed to be an external attack.

LifeLock recommends taking the following actions if you are a Sony PlayStation Network subscriber:

  • Check your credit card statement daily. Review the online statement for the credit or debit card you use for your PlayStation account. If you see suspicious activity, contact your bank or creditor immediately.
  • Do not provide sensitive information to in response to emails from Sony or PlayStation. Even if an email looks legitimate, do not provide sensitive information like your credit card number, credit card security code (the three digits on the back), or Social Security number to anyone claiming to be from Sony or PlayStation.
  • Change your password. If you use your PlayStation network password for other accounts, change them immediately.

Federal Trade Commission. “Consumer Sentinel Network Data Book For January – December 2011.” February 2012.
Javelin Strategy & Research. "2012 Identity Fraud Report: Social Media and Mobile Forming the New Fraud Frontier." February 2012.