Something went wrong. Try again later

Giant Bomb News

714 Comments

Good News: PSN Back (Maybe) Within a Week, Bad News: Everything Else [Updated]

Sony confirms personal information obtained by outside party. That's fantastic.


No Caption Provided
Update 3: Valve has just told me that anyone who connected their PlayStation Network account to Steam via Portal 2 should not be worried, either. 

"Steam has nothing to do with the PSN outage," said the company in the statement.

Update 2: Regarding rumors Sony may have notified banks days ahead of disclosing today's revelations to the public, I have since contacted customer service representatives at both Bank of America and Chase. I personally have accounts at both financial firms and the representatives claimed to have received no information from Sony about a mass breach of credit information.

Update:  For those who were asking, Sony has just confirmed to me there is currently no way to determine what password you were/are using on PSN. If you're worried at all, you should probably change your password used across the Internet.

Some users have suggested counting the number of "stars" in your saved password as a way to help determine what password you may have been using to access PSN. It's a start.

**

Sony has been frustratingly quiet about the problems afflicting PlayStation Network since the downtime started last week. Who caused the issue in the first place? When will the service be back online? More importantly, has the disruption opened up my personal information to the intruders?

One, Sony isn't talking specifics, with the latest update on the PlayStation Blog from senior director of corporate communications and social media Patrick Seybold only outlining that the company has identified "a compromise of personal information as a result of an illegal intrusion on our systems."

Two, probably within a week--at least for some parts of PSN. "We have a clear path to have PlayStation Network and Qriocity systems back online, and expect to restore some services within a week," said Seybold. "We’re working day and night to ensure it is done as quickly as possible."

Three, the answer is yes. Here's what was available to intruders: "name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID." It's also "possible" that "your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers" were included.

Unfortunately, credit card details remain a mystery. "While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility," added Seybold. "If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained."

== TEASER ==The continued air of "possibility" regarding how severely PSN was compromised, several work days and a full weekend after PSN initially went down, is not a particularly reassuring concept. I'd implore you to read Sony's full statement on the matter at the PlayStation Blog, as the company has complete details on what companies to contact regarding credit card fraud, should you notice any errant activity.

"We thank you for your patience as we complete our investigation of this incident, and we regret any inconvenience," reads the end of the statement. "Our teams are working around the clock on this, and services will be restored as soon as possible. Sony takes information protection very seriously and will continue to work to ensure that additional measures are taken to protect personally identifiable information."

Stay tuned as more developments unfold. If you notice your personal information was compromised, feel free to drop us an email or leave a comment below.
Patrick Klepek on Google+

714 Comments

Avatar image for shenstra
shenstra

175

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 7

Edited By shenstra
@Fallen189 said:
You are aware that Easter is one of the biggest religous events on the Christian calendar right? Or are you just ignorant "
On corporate calendars, it's little more than a blip. And this security breach, on a scale from "meh" to "it's the end of the world!" it rates "forget about Christmas, there's work to be done".  And everyone knows Christmas outranks Easter.
Avatar image for minipato
MiniPato

3030

Forum Posts

3

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By MiniPato
@Fallen189 said:
" @elcalavera said:
" @Fallen189 said:
It was the easter break, cut them some slack "
Yes, because Sony are children in school and not one of the biggest companies in the world. "
You are aware that Easter is one of the biggest religous events on the Christian calendar right? Or are you just ignorant "
That's no excuse. And unless everyone at Sony is a Christian it shouldn't even matter. They dropped the ball big time. Nevermind that they let PSN be compromised, what really pisses me off is that they said jack nothing about it to the users. How about a timely warning that our shit is fucked?
Avatar image for dany
Dany

8019

Forum Posts

416

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By Dany
@Fallen189 said:
" @elcalavera said:
" @Fallen189 said:
It was the easter break, cut them some slack "
Yes, because Sony are children in school and not one of the biggest companies in the world. "
You are aware that Easter is one of the biggest religous events on the Christian calendar right? Or are you just ignorant "
That doesn't mean shit if they had a security breach. They are not going to twiddle their thumbs through the weekend knowing full well PSN has been down from hackers.
Avatar image for kraznor
kraznor

1646

Forum Posts

14136

Wiki Points

0

Followers

Reviews: 5

User Lists: 12

Edited By kraznor

Just canceled my credit card. Figuring out everything I've had that password on over the last few years is going to be a headache though. Basically, thanks Sony! Keep on keeping on!

Avatar image for phish09
phish09

1138

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By phish09

I posted this in another thread, but I guess this is the REAL thread:

 They'll get PSN back up and running, and there will be multiplayer matches galore within the next couple of weeks, but I don't know if they'll ever make the kind of money that they could have made off the PSN Store again.  Once I'm able to log onto PSN, I'm removing my credit card information and Sony is definitely never getting it again.  There was and is really nothing wrong with their online gaming service, but where they will lose a lot of people with this is in the marketplace side of things.  You can blame it on hackers all you want.  Sony can find and lock up every member or Anonymous, and it's not going to change the fact that I don't trust Sony to be secure with any of my personal information.  Before they just announced that all my personal information was compromised, I was content with saying "Oh, they can give me a free game or whatever to make up for PSN being down"...now, knowing that they allowed all my information to be compromised, that simply will not suffice. 

I want guaruntee's that my information will be secure or a guarantee that Sony will cover any damages or costs associated with my information having been stolen.  In other words, if I have to change my credit card now and have my various monthly payments changed over to a new card, I demand that Sony covers the cost of me doing this.  I mean, I want to be paid back for the time I'm going to have to spend on ensuring that all my information is secure again. 

Sony can earn the consumers trust back but it's going to take a long time.  Trust is much more easily broken than it is established, and they just broke every level of trust that I had in them. 

For the record, if Sony has to go after these hackers and sue every one of them to cover these costs, that's fine with me.  That doesn't concern me one way or another, so long as in the long run Sony is covering all these costs associated with my information being compromised.

Avatar image for n7
N7

4159

Forum Posts

23

Wiki Points

0

Followers

Reviews: 4

User Lists: 2

Edited By N7
@OmegaPirate:  And you have so far made the most sense yet. Thank you for that.

Although, prepare to get 800 replies asking how you dare defend Sony, even though everyone right now is aware that SOMEONE STOLE OUR INFORMATION.

The most interesting thing about it though is Sony never says that our information has actually be compromised, they just say that it's possible and it may have been. Best case scenario, they're talking a worst case scenario and we're all okay. It seems like they still aren't aware of the full scope of this yet. I wonder who their investigation team is.

They should give Naoto a call.
Avatar image for fallen189
Fallen189

5453

Forum Posts

10463

Wiki Points

0

Followers

Reviews: 1

User Lists: 4

Edited By Fallen189
@Dany said:
" @Fallen189 said:
" @elcalavera said:
" @Fallen189 said:
It was the easter break, cut them some slack "
Yes, because Sony are children in school and not one of the biggest companies in the world. "
You are aware that Easter is one of the biggest religous events on the Christian calendar right? Or are you just ignorant "
That doesn't mean shit if they had a security breach. They are not going to twiddle their thumbs through the weekend knowing full well PSN has been down from hackers. "
By the replies in this thread, you'd think sony are just sitting on their asses and not doing anything. I'm certain that anybody who even knows how to lock a door is being drafted in on overtime
Avatar image for napalm
napalm

9227

Forum Posts

162

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By napalm

They should have at least issued a statement a day or two later stating some information might have been compromised (not detailing specifics, only a general overview for what they will look into), and saying they are taking the service offline to do an audit and find out what exactly happened. That is what they should have done so that people can at least know what was going on.

Avatar image for pie
Pie

7370

Forum Posts

515

Wiki Points

0

Followers

Reviews: 0

User Lists: 7

Edited By Pie

When are they going to let normal people who don't read gaming sites know?

Avatar image for lukin
Lukin

29

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By Lukin
@TranceAddix:  Fair enough maybe it's just different in here in Europe ( I presume you are American referencing AMEX) I don't really find myself having to enter my birthday alot here and if so only with a lot of other information like passwords etc..

I think overall using any online service you have apply your own common sense and keep an eye on your statement and accounts in case of anything strange happening. You cannot go though life expecting corporations like Sony/Microsoft to be wholly responsible for your personal information, that just being foolish, no offence meant to anyone.

 I feel kinda sorry for Sony as they are no worse that any other mega corp company, when are the hackers going to go after Apple tho, so I can play my games in peace!!
Avatar image for siphillis
Siphillis

1357

Forum Posts

6549

Wiki Points

0

Followers

Reviews: 2

User Lists: 17

Edited By Siphillis
Avatar image for phish09
phish09

1138

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By phish09

@Fallen189 said:

" @elcalavera said:

" @Fallen189 said:
It was the easter break, cut them some slack "
Yes, because Sony are children in school and not one of the biggest companies in the world. "
You are aware that Easter is one of the biggest religous events on the Christian calendar right? Or are you just ignorant "
 
And you realize that Japan is not a predominantly Christian country right?  Or are you just ignorant?
Avatar image for finalcut
FinalCut

133

Forum Posts

2

Wiki Points

0

Followers

Reviews: 0

User Lists: 23

Edited By FinalCut
@Enigma777: The world will always have 12-year-olds so it will never go away unfortunately.
Avatar image for lozzat
LOZZAT

258

Forum Posts

7

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By LOZZAT

WOW. They didn't decide to warn us about any of this... you know... days ago?

Avatar image for thechaos
TheChaos

1205

Forum Posts

337

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By TheChaos

Ruh roh.

Avatar image for kaosangel-DELETED
KaosAngel

14251

Forum Posts

6507

Wiki Points

0

Followers

Reviews: 8

User Lists: 3

Edited By KaosAngel

Everyone needs to calm down.  If people want to complain about the serious issue, complain about the lack of solid encryption when compared to XBL or Steam.  That's the bigger issue, the fact that Sony isn't using the same 256bit encryption that Valve uses for Steam, and MS uses for XBL.  

No one is going to get butt-raped by hackers, just ball up, and tell Sony to use real security next time.

Avatar image for hermes
hermes

3000

Forum Posts

81

Wiki Points

0

Followers

Reviews: 0

User Lists: 7

Edited By hermes
@Fallen189 said:
" @elcalavera said:
" @Fallen189 said:
It was the easter break, cut them some slack "
Yes, because Sony are children in school and not one of the biggest companies in the world. "
You are aware that Easter is one of the biggest religous events on the Christian calendar right? Or are you just ignorant "
F*** that. Even if we forget Sony is a multinational company, that is no excuse. I live in a country that celebrates Easter, yet I worked through it... And my work didn't involve millions of dollars in lost stock and hundreds of possible demands for my employer.
Avatar image for battletoad
Battletoad

146

Forum Posts

1

Wiki Points

0

Followers

Reviews: 2

User Lists: 8

Edited By Battletoad

@Fallen189:
I ordered a pizza on last Sunday. Surprisingly Domino's not only answered the phone, someone managed to drive to my house after preparing my order.

 

Last week I went shopping at Walmert. Surprisingly the store was running at semingly full staff, despite Easter coming up 6 days from then.

 

No one is saying Sony should have had everything settled by now, but I don't beleive for one second that Sony did not know any of its PSN users' data was stolen until 1 hour ago. And I dont think typing two sentences about it as a warning to their customers would have affected their possible Easter plans anytime in the previous ten days since the attack....Even if everyone working for the Japanese -based company all gave a rat's ass about Easter to begin with,

 

In short, you are pretty fucking stupid.

Avatar image for thoseposers
Thoseposers

1002

Forum Posts

4106

Wiki Points

0

Followers

Reviews: 0

User Lists: 15

Edited By Thoseposers

damn @patrickklepek you are knocking this hot news business out of the park!

Avatar image for re_player1
RE_Player1

8074

Forum Posts

1047

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By RE_Player1

I'm currently changing passwords to everything linked to the same e-mail and the credit card associated with my PSN account is old and out of date. Other than my actual PSN password, which I'll change ASAP, and my name, address etc am I safe?

Avatar image for rvone
RVonE

5027

Forum Posts

8740

Wiki Points

0

Followers

Reviews: 0

User Lists: 6

Edited By RVonE
@Fallen189 said:
"

                    @elcalavera said:
"

                    @Fallen189 said:
It was the easter break, cut them some slack
            "
Yes, because Sony are children in school and not one of the biggest companies in the world.

                   

                "
You are aware that Easter is one of the biggest religous events on the Christian calendar right? Or are you just ignorant

                   

                "



You are aware that Japan is not Christian at all, right?

Do you really think corporations of Sony's size give a fuck about Christian rituals and customs?

What's more, Sony's been giving us meaningless updates on the matter all through the Easter break and they repeatedly stated they were working on it. Clearly, there were a bunch of people in the office.

 

BTW, Easter wasn't a week ago.

Avatar image for zonerover
zonerover

623

Forum Posts

613

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By zonerover

So is the update from @patrickklepek saying that Sony is only storing a hash of our passwords on their system (aka they don't store our password directly but only after putting it through a hash on the system)? If they have done this (and done it properly), I guess that would mean that they've done the secure thing in this particular instance and people won't have to go changing all of their passwords.

Avatar image for ptc
ptc

640

Forum Posts

106

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By ptc

Anyone think Valve is regretting that they went all in Sony for Portal 2 and linked Steam? 

Avatar image for misterchief
MisterChief

832

Forum Posts

19

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By MisterChief
@KaosAngel said:
" Everyone needs to calm down.  If people want to complain about the serious issue, complain about the lack of solid encryption when compared to XBL or Steam.  That's the bigger issue, the fact that Sony isn't using the same 256bit encryption that Valve uses for Steam, and MS uses for XBL.  No one is going to get butt-raped by hackers, just ball up, and tell Sony to use real security next time. "
This is the same company whose completely fucked implementation of basic security lead to this situation in the first place.
Avatar image for ultimatepunchrod
ultimatepunchrod

361

Forum Posts

0

Wiki Points

0

Followers

Reviews: 3

User Lists: 1

Edited By ultimatepunchrod
@ChrisInCali said:
" This is why I never give me CC info to Xbox or PS3, and always buy point cards at stores instead. "
agreed, but i guess its a convenience factor for most people. im totally with you though
Avatar image for zityz
zityz

2365

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By zityz

I love how some of you guys care more about compensation than the the potential of your shit being stolen. Priorities much?


This really sucks for all those involved. However, for a service thats provided free of charge, these guys are doing a damn fine job trying to fix it as quick and secure as they can. I think anyone with a purchase with a CC should look into seeing if anything has been purchased with their info as of late, and yea as Patrick said change passwords if your using the same one for other things.

Hope they can figure out the root of the problem, get everything back to normal with minimal to zero customer problems.
Avatar image for karkarov
Karkarov

3385

Forum Posts

3096

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Karkarov
@Fallen189 said:

" @elcalavera said:

" @Fallen189 said:
It was the easter break, cut them some slack "
Yes, because Sony are children in school and not one of the biggest companies in the world. "
You are aware that Easter is one of the biggest religous events on the Christian calendar right? Or are you just ignorant "
No offense man but this was the first easter I have had off in six years and my company didn't get their entire online store infrastructure compromised over the weekend on any of them that I worked.  Screw holidays, if millions of peoples personal information and credit card info is at risk they better be working overtime to the extreme to fix the problem and find who did it.  If someone lost their easter off?  They can get the hell over it.  The only thing they need to be praying about is they don't get sued by millions of people for negligence due to not properly securing their users personal info.
Avatar image for tranceaddix
tranceaddix

101

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By tranceaddix
@Lukin:

Well that solves our discrepancy. I am not too knowledgeable on European security protocols.

Nonetheless, security breaches are bad for us all. Hopefully Sony solves this shit soon. And they had an obligation to report any threats, even if there was a small chance. That is what responsibility to customers is.
Avatar image for zaph
Zaph

309

Forum Posts

5166

Wiki Points

0

Followers

Reviews: 0

User Lists: 7

Edited By Zaph
@Fallen189:  Nobody is doubting that Sony is doing everything in their power to fix the problem and get their services back online. But what is disgusting is that they waited until they were sure there was a security breech to tell anyone.

When you're a company the size of Sony and are trusted with so much customer information, the second you suspect a security breech, you let people know.

Instead, Sony chose to wait until they were sure so that they didn't have to deal with the PR nightmare if it was just a false alarm.

IMO, putting your PR priorities ahead of your responsibility to your customer is unforgivable.
Avatar image for ptc
ptc

640

Forum Posts

106

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By ptc

It just occurred to me that Sony is handling this situation about as well as TEPCO is handling it's nuclear meltdowns.   Zing!

Avatar image for act26
act26

124

Forum Posts

447

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By act26

The hackers have done a fine job of 'taking down' Sony. Oh wait, no they haven't they've just stopped ME from playing MY games that I spent MY money on and in the process have stolen all MY details. Nice one!


But Sony does need a serious wake up call about security, how can it of been so easy for a group of arseholes to take down the PSN?
Avatar image for whatthedang
WhatTheDang

120

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By WhatTheDang
@Fallen189 said: 
It was the easter break, cut them some slack "
I am slow clapping so hard right now. 
Avatar image for kaosangel-DELETED
KaosAngel

14251

Forum Posts

6507

Wiki Points

0

Followers

Reviews: 8

User Lists: 3

Edited By KaosAngel
@ptc said:
" Anyone think Valve is regretting that they went all in Sony for Portal 2 and linked Steam?  "
Valve uses 256-bit encryption for everything related to Steam.  The worst people could get from this is your Steam email, which is useless now as Valve uses the new CPU-based encryption keys.  Steam is 100% hack-proof now, as Gabe has proven on many moments.
Avatar image for mechabolic
Mechabolic

126

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Mechabolic

Allow me to play devil's advociate here and say that perhaps sony didn't want to openly say that accounts were compromised.  Think about it, if you were the one that stole the information and sony immediately announced that they know you would hustle to move the information you stole.  So perhaps sony kept quiet while trying to find out what exactly happened and have a good indication on what to do and are now telling everyone what happened, or they could be a bunch of clods that couldn't create an SSL connection if their life depended on it.

Avatar image for misterchief
MisterChief

832

Forum Posts

19

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By MisterChief
@zonerover said:
" So is the update from @patrickklepek saying that Sony is only storing a hash of our password's on their system (aka they don't store our password directly but only after putting it through a hash on the system)? If they have done this (and done it properly), I guess that would mean that they've done the secure thing in this particular instance and people won't have to go changing all of their passwords. "
People usually get the hashes and then just perform rainbow table attacks to brute force the passwords.
Avatar image for fallen189
Fallen189

5453

Forum Posts

10463

Wiki Points

0

Followers

Reviews: 1

User Lists: 4

Edited By Fallen189
@act26 said:
" The hackers have done a fine job of 'taking down' Sony. Oh wait, no they haven't they've just stopped ME from playing MY games that I spent MY money on and in the process have stolen all MY details. Nice one!

But Sony does need a serious wake up call about security, how can it of been so easy for a group of arseholes to take down the PSN?
"
Did they like, fill in your drive with play doh or something?
Avatar image for damswedon
damswedon

3246

Forum Posts

1809

Wiki Points

0

Followers

Reviews: 3

User Lists: 12

Edited By damswedon
@RE_Player92 said:
" I'm currently changing passwords to everything linked to the same e-mail and the credit card associated with my PSN account is old and out of date. Other than my actual PSN password, which I'll change ASAP, and my name, address etc am I safe? "
Might want to die your hair, change your finger prints and your eyes as well.
Oh to be extra safe have a sex change.
Avatar image for ptc
ptc

640

Forum Posts

106

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By ptc
@KaosAngel said:

" @ptc said:

" Anyone think Valve is regretting that they went all in Sony for Portal 2 and linked Steam?  "
Valve uses 256-bit encryption for everything related to Steam.  The worst people could get from this is your Steam email, which is useless now as Valve uses the new CPU-based encryption keys.  Steam is 100% hack-proof now, as Gabe has proven on many moments. "
My point was that Valve has linked themselves so tightly with a company that is completely the opposite: 100% hack-able. It's an image thing.
Avatar image for kimchibomb
kimchibomb

30

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By kimchibomb

Glad I never got around to buying the Undead DLC for Red Dead.

Avatar image for act26
act26

124

Forum Posts

447

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By act26
@Fallen189: what?
Avatar image for skronk61
Skronk61

194

Forum Posts

0

Wiki Points

0

Followers

Reviews: 2

User Lists: 0

Edited By Skronk61

Damn I don't want to cancel my card it means i'd have to wait like 9 days before I could use my card again and I'd have to change my card details on everything website I buy from, what a pain.

Avatar image for xenonick
XenoNick

1584

Forum Posts

4

Wiki Points

0

Followers

Reviews: 0

User Lists: 10

Edited By XenoNick

Will this fucking sucks. My fat ps3 had a blu ray drive failure last week and was gonna replace it tomorrow and transfer stuff over. Cant now due to network being down so I'd have two useless consoles. Now that I know personal info may have been leaked I'm not sure if I wanna get a replacement. Might just sell my games and get a blu ray player for films.

Avatar image for fallen189
Fallen189

5453

Forum Posts

10463

Wiki Points

0

Followers

Reviews: 1

User Lists: 4

Edited By Fallen189
@act26 said:
" @Fallen189: what? "
You can still put a videogame in your console. Get over it
Avatar image for lukin
Lukin

29

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By Lukin
@TranceAddix:  Totally agree with you

I just hope this wakes people up to being more vigilant online when it comes to personal data, it is worrying how many people on here seem to have used the same password for PSN and all other online accounts.

It is Sony today, but could just as easily be Microsoft tomorrow. 

Again though, its a bloody games console, why can't hackers go after war  criminals or evil governments
Avatar image for solidocelot
SolidOcelot

469

Forum Posts

374

Wiki Points

0

Followers

Reviews: 9

User Lists: 5

Edited By SolidOcelot

This sucks big time. Though Patrick earning his stripes, good job.

Avatar image for thebobster10
thebobster10

392

Forum Posts

1

Wiki Points

0

Followers

Reviews: 0

User Lists: 6

Edited By thebobster10

Shit happens. But this particular SHIT better not happen again. 

Avatar image for kalmis
kalmis

1745

Forum Posts

6127

Wiki Points

0

Followers

Reviews: 115

User Lists: 6

Edited By kalmis

That is scary. At least a good incentive to change bunch of passwords