Something went wrong. Try again later

Giant Bomb News

714 Comments

Good News: PSN Back (Maybe) Within a Week, Bad News: Everything Else [Updated]

Sony confirms personal information obtained by outside party. That's fantastic.


No Caption Provided
Update 3: Valve has just told me that anyone who connected their PlayStation Network account to Steam via Portal 2 should not be worried, either. 

"Steam has nothing to do with the PSN outage," said the company in the statement.

Update 2: Regarding rumors Sony may have notified banks days ahead of disclosing today's revelations to the public, I have since contacted customer service representatives at both Bank of America and Chase. I personally have accounts at both financial firms and the representatives claimed to have received no information from Sony about a mass breach of credit information.

Update:  For those who were asking, Sony has just confirmed to me there is currently no way to determine what password you were/are using on PSN. If you're worried at all, you should probably change your password used across the Internet.

Some users have suggested counting the number of "stars" in your saved password as a way to help determine what password you may have been using to access PSN. It's a start.

**

Sony has been frustratingly quiet about the problems afflicting PlayStation Network since the downtime started last week. Who caused the issue in the first place? When will the service be back online? More importantly, has the disruption opened up my personal information to the intruders?

One, Sony isn't talking specifics, with the latest update on the PlayStation Blog from senior director of corporate communications and social media Patrick Seybold only outlining that the company has identified "a compromise of personal information as a result of an illegal intrusion on our systems."

Two, probably within a week--at least for some parts of PSN. "We have a clear path to have PlayStation Network and Qriocity systems back online, and expect to restore some services within a week," said Seybold. "We’re working day and night to ensure it is done as quickly as possible."

Three, the answer is yes. Here's what was available to intruders: "name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID." It's also "possible" that "your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers" were included.

Unfortunately, credit card details remain a mystery. "While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility," added Seybold. "If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained."

== TEASER ==The continued air of "possibility" regarding how severely PSN was compromised, several work days and a full weekend after PSN initially went down, is not a particularly reassuring concept. I'd implore you to read Sony's full statement on the matter at the PlayStation Blog, as the company has complete details on what companies to contact regarding credit card fraud, should you notice any errant activity.

"We thank you for your patience as we complete our investigation of this incident, and we regret any inconvenience," reads the end of the statement. "Our teams are working around the clock on this, and services will be restored as soon as possible. Sony takes information protection very seriously and will continue to work to ensure that additional measures are taken to protect personally identifiable information."

Stay tuned as more developments unfold. If you notice your personal information was compromised, feel free to drop us an email or leave a comment below.
Patrick Klepek on Google+

714 Comments

Avatar image for vicrattlehead
VicRattlehead

1417

Forum Posts

1294

Wiki Points

0

Followers

Reviews: 0

User Lists: 17

Edited By VicRattlehead

so fucking angry right now... guess ill have to phone the bank in the morning... gg sony 

Avatar image for battletoad
Battletoad

146

Forum Posts

1

Wiki Points

0

Followers

Reviews: 2

User Lists: 8

Edited By Battletoad

Thanks for the updates Patrick. Clearly GB is better now that it has hired you. Breaking news updates  being covered by GB itself instead of just citing other sites, is a nice upgrade indeed.
Avatar image for detectivepbert
detectivepbert

273

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 2

Edited By detectivepbert

with such pos security you'd think psn was managed by facebook or something.

Avatar image for mideonnviscera
MideonNViscera

2269

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By MideonNViscera

Well, hackers suck.

Avatar image for damswedon
damswedon

3246

Forum Posts

1809

Wiki Points

0

Followers

Reviews: 3

User Lists: 12

Edited By damswedon
@Battletoad said:
" @Krakn3Dfx: how does one go about changing their birthdate? "
Be the Queen and get a state birthday.
Avatar image for misterchief
MisterChief

832

Forum Posts

19

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By MisterChief
@Buzzkill said:
" Holy assballs Sony if only you weren't so arrogant to have made that idiotic battleship tweet from kevin butler daring the hackers to come at you bro.......I'm done. Done with Sony products. This was the last straw. "
It only does 80710A06.
Avatar image for lockwoodx
lockwoodx

2531

Forum Posts

6

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By lockwoodx

Bring on the Dreamcast 2!

Avatar image for beforet
beforet

3534

Forum Posts

47

Wiki Points

0

Followers

Reviews: 1

User Lists: 2

Edited By beforet

Well, that's a pain in the ass. Guess I'll change my card. I would change my password too, but that doesn't seem possible.

Avatar image for tropico89
tropico89

45

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By tropico89

Thanks for waiting a week to tell us about the personal info getting hacked. 
Avatar image for battletoad
Battletoad

146

Forum Posts

1

Wiki Points

0

Followers

Reviews: 2

User Lists: 8

Edited By Battletoad
@Krakn3Dfx:
how does one go about changing their birthdate?
Avatar image for toxicfruit
ToxicFruit

1924

Forum Posts

403

Wiki Points

0

Followers

Reviews: 2

User Lists: 1

Edited By ToxicFruit

Don't have any card on my PSN account thank god, but this sucks hope they find the bastards that did this

Avatar image for lockwoodx
lockwoodx

2531

Forum Posts

6

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By lockwoodx

Holy assballs Sony if only you weren't so arrogant to have made that idiotic battleship tweet from kevin butler daring the hackers to come at you bro.......

I'm done. Done with Sony products. This was the last straw.

Avatar image for gav47
Gav47

1583

Forum Posts

2761

Wiki Points

0

Followers

Reviews: 0

User Lists: 11

Edited By Gav47

Man, Sony have completely dropped the fucking ball on this one.

Avatar image for deeveeus
Deeveeus

486

Forum Posts

121

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By Deeveeus
@AndyMP said:
" @Deeveeus: Watch out for identity theft as well. The card and passwords are the easy part - a pain in the *** but you can do it - whereas the potential id theft is something you can't do anything about until something happens. Hopefully nothing DOES happen. You just have to be vigilent I guess. "
Don't they need the matching passwords and what not to make that work though? Luckily my addresses have since changed since I updated the PSn stuff
Avatar image for striderno9
striderno9

1362

Forum Posts

3

Wiki Points

0

Followers

Reviews: 3

User Lists: 6

Edited By striderno9

Thanks for all the info Patrick!

Avatar image for jfetch
JFetch

124

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By JFetch

If this was an American company, they would rebrand the online service within a month to help ease the stigma now attached to the name. Knowing Sony, they will just act like it never happened.

Avatar image for andymp
andymp

257

Forum Posts

163

Wiki Points

0

Followers

Reviews: 2

User Lists: 4

Edited By andymp
@Deeveeus: Watch out for identity theft as well. The card and passwords are the easy part - a pain in the *** but you can do it - whereas the potential id theft is something you can't do anything about until something happens. Hopefully nothing DOES happen. You just have to be vigilent I guess.
Avatar image for mayorfeedback
MayorFeedback

685

Forum Posts

10001

Wiki Points

0

Followers

Reviews: 1

User Lists: 6

Edited By MayorFeedback

  

Avatar image for wickedsc3
wickedsc3

1044

Forum Posts

51

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By wickedsc3

Who didn't see this coming.

Avatar image for krakn3dfx
Krakn3Dfx

2746

Forum Posts

101

Wiki Points

0

Followers

Reviews: 4

User Lists: 3

Edited By Krakn3Dfx

 Eh, you know, 75+ million accounts, what are the chances that whoever has them will ever even get to yours anyway?  Although, if your last name starts with an 'A', I'd probably change your birthdate and address IMMEDIATELY.

Plus, I question whether or not this was a "We're take this information and use it" as much as "We're going to take this information to show Sony that we can and freak em out." Seems like Sony has pissed off some people lately, people who mostly dwell in their parents' basement, occasionally take out the trash, and spend a lot of time trying to get revenge on companies that remove "OtherOS" from their appliances.  It wouldn't surprise me if whoever took this stuff never does anything with it other than hold it over Sony's head, and, by default, 75+ million PSN users as well.

Avatar image for jensonb
Jensonb

2092

Forum Posts

3407

Wiki Points

0

Followers

Reviews: 3

User Lists: 8

Edited By Jensonb

First of all, a hearty "Fuck You" to the hackers of the world. I've always had my mis-givings about you in general, but here we have solid proof of why a hacker cannot be trusted in any situation. There is no moral justification for shit like this. I don't care what your opinion of Sony is, you pull this crap and you're  an asshole. Oh boo-hoo, they sued GeoHotz. And you want us all to care and be mad? Well guess what...Nobody does care, and nobody ever will. If you guys want to dick around with your hardware fine, but don't come crying to those of us who are happy to enjoy these products legitimately when Sony ort whoever gets pissed off at you.


This is the same problem I have with people's arguments against Apple's efforts to prevent iOS Jailbreaking: you're free to try an bust into it all you like, but don't expect Apple to sanction it or for us normal people to give a rat's ass.

Now that that's out of the way, a bewildered "What the hell, hero?!" to you, Sony. I knew the PSN Netcode was made of jank, but this? This is an absolute joke. I've been a paying customer with Apple for more than half a decade. No problems there. Ditto Amazon, Microsoft and countless other services.

I've been a paying customer of yours for less than two years, and you may have allowed pretty much all the data you had on me to be jacked? Come the feck on. That's just unacceptable. Say what you will about Nintendo Wi-Fi Connection and the SpotPass Whispernet Service lacking features, they at least appear to be secure and reliable.

I can't wait to see your presence at E3 this year Sony. It's gonna be a real laugh riot. I suspect it's gonna take a bit more than Microsoft's stunt from last year of Oprah-ing everyone a free console to win you much positive press.
Avatar image for sweep
sweep

10887

Forum Posts

3660

Wiki Points

0

Followers

Reviews: 4

User Lists: 14

Edited By sweep  Moderator

You don't need to own a PS3 to experience the backlash of this monumental fuck-up. This is bad news for the reputation of the whole industry :(

Avatar image for kennybaese
kennybaese

729

Forum Posts

1507

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

Edited By kennybaese
@Make_Me_Mad said:
" So, is this going to affect only PS3 users, or do the people who bought things from the PSP's online store also need to worry?  If it goes that far, I'll be needing to give my brother a call shortly. "
I'd imagine that that stuff is compromised as well given that everything runs through PSN as far as I know.

I went through today and changed all of my password as I used variants of the same password on everything, and I'm going to be talking to the bank later today about getting a new card number, so that's going to happen.

This is all completely fucked. I really hope that they offer refunds for PS Plus or something because I think from now on I might just leave the PlayStation offline from now on, even if they do get the thing fixed. This all is a huge disappointment. I get that the service is free, so I'm not complaining about the service being out, but the fact that all of my info is compromised means that I'll be pretty damn hesitant to trust Sony's online services in the future.

Either way, huge bummer because I've loved the hell out of my PS3 and the majority of PSN up until this point.
Avatar image for andys
AndyS

44

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By AndyS

Not sure the average first line customer service rep would be who I would go to to ask about Sony's potential contact to bank security groups.  It may be that contact was made of a potential problem with communications being drafted now for distribution to the phone people.


I'd go to bank PR or security to find out what's actually happened.
Avatar image for omegapirate
OmegaPirate

5643

Forum Posts

6172

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

Edited By OmegaPirate

Apologies for my wall of text. it may have come off as needlessly fanboyish or pro sony (and believe me i'm as pissed as anyone for losing my details) but the amount of just complete batshit insanity going on in this hread is beyond belief. 

The biggest issue is the delay in time between sony finding out, and us knowing - so much of an issue that a senator has actually grabbed a hold of Tretton 

and questioned their method methods of handling it.

http://www.joystiq.com/2011/04/26/sonys-failure-to-report-data-breach-incurs-ct-senator-blumentha/?a_dgi=aolshare_twitter

http://forums.sarcasticgamer.com/showpost.php?p=645846&postcount=734

Those are the 2 important links in this whole thing, that and the EMAIL psn customers will be receiving  - until then all we can pray is that the hackers didnt mess things up too badly for us, and are apprehended and punished. Not just for sonys sake, but for the reputation of the industry as a whole!
Avatar image for deeveeus
Deeveeus

486

Forum Posts

121

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By Deeveeus
@benjaebe said:
" Bummer, man. Eh, I'll just get a new card and update all my passwords. This whole situation is really shitty, but it's not too hard to protect yourself. "
Exactly what i did...canceled the cards, changed all passwords...good to go
Avatar image for behonkiss
Behonkiss

75

Forum Posts

43

Wiki Points

0

Followers

Reviews: 2

User Lists: 1

Edited By Behonkiss

I'm almost willing to bet money that every person in this thread who has typed "That's the last penny Sony gets from me!" and whatnot will be a hypocrite by the time Uncharted 3 is out.

Avatar image for thegoldencat7
thegoldencat7

1504

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By thegoldencat7

Oh goody.

Avatar image for benjaebe
benjaebe

2868

Forum Posts

7204

Wiki Points

0

Followers

Reviews: 1

User Lists: 6

Edited By benjaebe

Bummer, man. Eh, I'll just get a new card and update all my passwords. This whole situation is really shitty, but it's not too hard to protect yourself.

Avatar image for agent47
Agent47

1931

Forum Posts

8849

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Agent47

This is getting out of hand, I don't own a PS3 but damn I feel the sting and hope everyone with personal information gets their cards erased or figure something out with their bank or just wipe out all their info some how.This just sucks, and at the time of 3 mayor releases great.

Avatar image for turboman
turboman

10064

Forum Posts

19

Wiki Points

0

Followers

Reviews: 23

User Lists: 11

Edited By turboman

My bank account has around $7 in it...


looks like the joke's on you, hacker.
Avatar image for thomasonfa
thomasonfa

398

Forum Posts

82

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By thomasonfa

I feel like Glenn Beck saying this but I wonder is there a link with the PSN opening up their network to Steam. According to Sony, the attack was, " ...discovered...between April 17 and April 19, 2011..." I understand that this is a stretch but aren't all conspiracies. 


Than again, this is when Sony "discovered" the problem. I wonder how long it could have been going on?

I smell a case action lawsuit Sony.
Avatar image for deactivated-653d2db498d3a
deactivated-653d2db498d3a

155

Forum Posts

155

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

Crap.

Avatar image for my2k2zx2
my2k2zx2

8

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By my2k2zx2

So what's gonna happen when the PSN goes back online?  Will I have to make a new account?

Avatar image for histeachn
histeachn

18

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By histeachn

I am least inclined to blame Sony for this.  Should they have had a more stalwart system in place?  Sure, but there wasn't a known potential for this to happen until the PS3 got hacked.  Now there are people pointing fingers at Sony for this, and it's not really their doing.  Sometimes this is the way you learn there are gaping holes, and it sucks. 

This is why they pursued the lawsuit and tried to close the floodgates, but the PS3 crack already got through.  My bank information is on PSN as well, but I also regularly check my account and can contact my bank very quickly about an off purchase.  I can't go online to change my password since PSN is down, so I'm just going to be vigilant and see what happens. 

I wish Sony could do more than react, but it wasn't someone from Sony who published the way to hack into the system.  All this does is show that Sony had reason to be concerned from the original hack.  I say let them clean this up, and hopefully move on with a more secure PSN. 

Avatar image for ben99
Ben99

1199

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

Edited By Ben99

Thank God for scratch cards 

Avatar image for ddensel
ddensel

423

Forum Posts

5610

Wiki Points

0

Followers

Reviews: 5

User Lists: 1

Edited By ddensel

It's clear that Microsoft and Sony want more and more of their business to take place over their online marketplaces. With downloadable content and even full games being available over the internet, the dream (or nightmare) of a disc-less era of console gaming is not too far off.

But how are we supposed to trust these companies with our information if shit like this happens? If this is what the future's like, I'll take my discs and paper money thank you.

Avatar image for sleepydoughnut
SleepyDoughnut

1269

Forum Posts

133

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

Edited By SleepyDoughnut

Sony's reaction is basically like, "well.......yeah.......fuck......". I couldn't get PSN to work up at college before all this nonsense and it would seem that was a blessing in disguise.

Avatar image for churrific
churrific

501

Forum Posts

5

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By churrific

Wow this is the most ignorant sounding thread ever. From all sides of the issue.

Avatar image for fudgedragon
Fudgedragon

7

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Fudgedragon

When I go to sign in to PSN it says the site is "UNTRUSTED" lol what do I do?

Avatar image for priorityseven
priorityseven

352

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By priorityseven

Fuck me, what a mess.

Avatar image for loganwtf
loganwtf

115

Forum Posts

25

Wiki Points

0

Followers

Reviews: 0

User Lists: 7

Edited By loganwtf

I'm not sure if it is related but my gmail was hacked on Monday to send out spam messages and I was using the same password on both sites.  I've since changed all of my account passwords after some embarrassing apologies to people on my contacts list.

Avatar image for batmeng
batmeng

204

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By batmeng

Joke's on them. My bank account is already a dried out riverbed.

Avatar image for lukin
Lukin

29

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By Lukin
@Styl3s said:
" @Lukin said:
" @TranceAddix:  Totally agree with you

I just hope this wakes people up to being more vigilant online when it comes to personal data, it is worrying how many people on here seem to have used the same password for PSN and all other online accounts.

It is Sony today, but could just as easily be Microsoft tomorrow. 

Again though, its a bloody games console, why can hackers go after war  criminals or evil governments
"
I am very vigilant to where i put my bank card, it's not my fault that i put faith into a multi what? billion dollar company? i expected better security and respect, they wait a week to tell me? fuck them and their services, as to people complaining oh you only care about compensation your goddamn right we want it.. when it comes back up it will be about 2 weeks of downtime plus them holding back information like this? they OWE their customers something for this shit and like i said if i wasnt for the fact there are 2-3 games coming out i really wanna play i would unhook my machine and throw it in the garbage simply because of the way they handled it, i don't like doing business with scumbags who hold back information they have no right holding back, it's their right to hold back the fact that my information could of been stolen that is complete bullshit. "
Completely valid points, all I am saying is that along with the Sony "scumbags" there is also the hacker "scumbags" who actually stole the information and given the opportunity they would do the same to any other company.
Avatar image for weggles
WEGGLES

737

Forum Posts

4

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

Edited By WEGGLES
@draok: This is why you ALWAYS have a different password for each website. 
Avatar image for draok
draok

3

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By draok

Just because Sony says there is no way to determine what password you were using on the PSN. Doesn't mean your password is safe! Since the "intruder" does have the "highly" encrypted password, you should still consider your password compromised. It's just a matter of time when someone figures out the cryptography that was used and how efficient they are at cracking it. 

Avatar image for mudman
MudMan

1423

Forum Posts

300

Wiki Points

0

Followers

Reviews: 0

User Lists: 11

Edited By MudMan
@ptc said:
" @KaosAngel said:
" @ptc said:
" Anyone think Valve is regretting that they went all in Sony for Portal 2 and linked Steam?  "
Valve uses 256-bit encryption for everything related to Steam.  The worst people could get from this is your Steam email, which is useless now as Valve uses the new CPU-based encryption keys.  Steam is 100% hack-proof now, as Gabe has proven on many moments. "
My point was that Valve has linked themselves so tightly with a company that is completely the opposite: 100% hack-able. "
So you have no point, then.

Acknowledging it is the first step, I guess.
Avatar image for damswedon
damswedon

3246

Forum Posts

1809

Wiki Points

0

Followers

Reviews: 3

User Lists: 12

Edited By damswedon

Hey guys I've got a great idea for console security. Every game has a code based on the disk and console also when you want to buy something off of the store you have to re-enter your card details from scratch.

Avatar image for death_burnout
Death_Burnout

3847

Forum Posts

1617

Wiki Points

0

Followers

Reviews: 5

User Lists: 6

Edited By Death_Burnout

This is the fucking worst.

Avatar image for deeveeus
Deeveeus

486

Forum Posts

121

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By Deeveeus
@Brenderous said:
" I guess I should remove my credit card info when I get home.

Oh wait, I can't log in.

Great.
"
Cancel that card, explain to your bank, they will change the card #