Something went wrong. Try again later

Giant Bomb News

714 Comments

Good News: PSN Back (Maybe) Within a Week, Bad News: Everything Else [Updated]

Sony confirms personal information obtained by outside party. That's fantastic.


No Caption Provided
Update 3: Valve has just told me that anyone who connected their PlayStation Network account to Steam via Portal 2 should not be worried, either. 

"Steam has nothing to do with the PSN outage," said the company in the statement.

Update 2: Regarding rumors Sony may have notified banks days ahead of disclosing today's revelations to the public, I have since contacted customer service representatives at both Bank of America and Chase. I personally have accounts at both financial firms and the representatives claimed to have received no information from Sony about a mass breach of credit information.

Update:  For those who were asking, Sony has just confirmed to me there is currently no way to determine what password you were/are using on PSN. If you're worried at all, you should probably change your password used across the Internet.

Some users have suggested counting the number of "stars" in your saved password as a way to help determine what password you may have been using to access PSN. It's a start.

**

Sony has been frustratingly quiet about the problems afflicting PlayStation Network since the downtime started last week. Who caused the issue in the first place? When will the service be back online? More importantly, has the disruption opened up my personal information to the intruders?

One, Sony isn't talking specifics, with the latest update on the PlayStation Blog from senior director of corporate communications and social media Patrick Seybold only outlining that the company has identified "a compromise of personal information as a result of an illegal intrusion on our systems."

Two, probably within a week--at least for some parts of PSN. "We have a clear path to have PlayStation Network and Qriocity systems back online, and expect to restore some services within a week," said Seybold. "We’re working day and night to ensure it is done as quickly as possible."

Three, the answer is yes. Here's what was available to intruders: "name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID." It's also "possible" that "your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers" were included.

Unfortunately, credit card details remain a mystery. "While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility," added Seybold. "If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained."

== TEASER ==The continued air of "possibility" regarding how severely PSN was compromised, several work days and a full weekend after PSN initially went down, is not a particularly reassuring concept. I'd implore you to read Sony's full statement on the matter at the PlayStation Blog, as the company has complete details on what companies to contact regarding credit card fraud, should you notice any errant activity.

"We thank you for your patience as we complete our investigation of this incident, and we regret any inconvenience," reads the end of the statement. "Our teams are working around the clock on this, and services will be restored as soon as possible. Sony takes information protection very seriously and will continue to work to ensure that additional measures are taken to protect personally identifiable information."

Stay tuned as more developments unfold. If you notice your personal information was compromised, feel free to drop us an email or leave a comment below.
Patrick Klepek on Google+

714 Comments

Avatar image for matfei90
Matfei90

1279

Forum Posts

5

Wiki Points

0

Followers

Reviews: 0

User Lists: 6

Edited By Matfei90

I'm glad I've only ever purchased things through XBL. Granted I wish I still went with a pure point card approach for everything, just to be safe.

Avatar image for americanninja
AmericanNinja

160

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By AmericanNinja

Sony did a good job of handling this IMHO.

Avatar image for thomasonfa
thomasonfa

398

Forum Posts

82

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By thomasonfa

I just visited PSN Blog and I could not help notice the comments.

Like, “Wow, this is alot of info. Thanks, this is very much appreciated by all of us Playstation fans - Ejsponge61".

Most were very positive. However, I wish people would think about it. If any other business had told your information was stolen, would you be upset. I'm peeved that they didn't say this in the beginning.

Also, this may be the LARGEST information theft in the world. Just think about how many people use PSN, millions.

Avatar image for jayjonesjunior
jayjonesjunior

1148

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By jayjonesjunior

People don't give enough credit for the hackers, Sony didn't just give up the information, that person or group had to commit a crime to get it out.

 

Anyway most of the comments here come from people that don't even own a PS3.

Avatar image for circle
circle

5

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By circle
Avatar image for egocheck616
EgoCheck616

820

Forum Posts

37

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By EgoCheck616

Awesome. I look forward to selling my PS3 on Friday and picking up a 3DS.

At least with a 3DS I can play Street Fighter IV online. 

Also, 134 Steam games have kept me from turning on my PS3 for weeks.
Avatar image for tepiddeath
TepiDDeatH

101

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

Edited By TepiDDeatH

I use point cards, not CC, so I feel relitivly safe. My twenty dollars and five cents better be in my wallet though LOL. Seriously, no NHL Game center during the play offs is kinda pissing me off though.

Avatar image for madleper
MadLeper

31

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By MadLeper
@Andorski said:
"
Hacking the system =/= hacking the service.  There should be no reason why a device with custom firmware should give one access to any and all information on online servers.  I don't blame Sony for being arrogant in their appraisal for their once-uncrackable console, or for their legal actions once people were able to open up the PS3.  I blame them for their idiotic security method of having their system securities on the hardware rather then on their servers.

I'm not even that technically proficient in computer hardware/software, but even I understand the idea that if a person physically has a device with security measures on it, they can and will break through it.
"
You do realize that the entire purpose of the Rebug CFW was to spoof a developers console and so get access to the Developers section of the PSN right?  And more than likely once the hackers were inside that they started on breaching the entire PSN network.

After all, it's been pretty clear in the past that the goals of the PS3 hackers have been to 1: Get free games and 2: Hack into PSN to cheat and steal.

Jus imagine if these bloody hackers had decided to insert an infected FW update, or poison a few apps to destroy any local saved games or media?  Just like what a bunch of thieves would do after breaking into the store and looting the register, vandalize the shit out the place.
Avatar image for battletoad
Battletoad

146

Forum Posts

1

Wiki Points

0

Followers

Reviews: 2

User Lists: 8

Edited By Battletoad
@thomasonfa said:
"
               

I just visited PSN Blog and I could not help notice the
comments.


Like, “Wow, this is alot of info. Thanks, this is very much
appreciated by all of us Playstation fans - Ejsponge61".


Most were very positive. However, I wish
people would think about it. If any other business had told your information
was stolen, would you be upset. I'm peeved that they didn't say this in the
beginning.


Also, this may be the LARGEST information theft in the
world. Just think about how many people use PSN, millions.


            "

I saw somewhere saying this was the 4th largest. Top place was something like 120 million. But yes, it's sad to see people so addicted to the products of a company that will not only defend them to the bitter end, but actually thank them for screwing them over.
Avatar image for dylabaloo
Dylabaloo

1573

Forum Posts

7

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

Edited By Dylabaloo
@drhans said:
"   
"
Brilliant.
Avatar image for superbobafett
superbobafett

111

Forum Posts

19

Wiki Points

0

Followers

Reviews: 5

User Lists: 12

Edited By superbobafett


you can absolutely blame Sony for the intrusion. This is one of the largest online stores in the world. It's their job to protect our personal information. Full stop. That's it. It's their job.

 

They're supposed to protect our info, they failed - this is a huge failure on Sony's behalf and they should not in anyway be given a 'pass' due to being outcrafted by some hackers. It's their job to protect our info by outcrafting the crafty hackers.

 

 

...crafty.

Avatar image for madleper
MadLeper

31

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By MadLeper
@Battletoad said:

            "
I saw somewhere saying this was the 4th largest. Top place was something like 120 million. But yes, it's sad to see people so addicted to the products of a company that will not only defend them to the bitter end, but actually thank them for screwing them over. "
Well, to this day the XBOX360 fans still give MS a pass over the the whole RRoD fiasco and smugly declare that they've only had to replace their console 6 or 7 times.  

Fanboys are everywhere if you look hard enough
Avatar image for subbeh
Subbeh

91

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Subbeh
@jayjonesjunior said:
"

People don't give enough credit for the hackers, Sony didn't just give up the information, that person or group had to commit a crime to get it out.

 "


Yeah, you're right. Nice job guys! really appreiate the effort you've put in on this!
If you did get my CC details then buy yourselves something nice, my treat!
Avatar image for andorski
Andorski

5482

Forum Posts

2310

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

Edited By Andorski
@Battletoad said:
" @thomasonfa said:
"
               

I just visited PSN Blog and I could not help notice the
comments.


Like, “Wow, this is alot of info. Thanks, this is very much
appreciated by all of us Playstation fans - Ejsponge61".


Most were very positive. However, I wish
people would think about it. If any other business had told your information
was stolen, would you be upset. I'm peeved that they didn't say this in the
beginning.


Also, this may be the LARGEST information theft in the
world. Just think about how many people use PSN, millions.


            "
I saw somewhere saying this was the 4th largest. Top place was something like 120 million. But yes, it's sad to see people so addicted to the products of a company that will not only defend them to the bitter end, but actually thank them for screwing them over. "
There's a weird dichotomy when you read PS.Blog posts compared to posts that you see on majornelson.com.

PS users on the blog seem to be drinking the kool-aid a lot more.  In general, posts are more positive and thankful.  They praise Sony when they provide a feature and service and are understanding when something goes wrong.  I think it was really telling that PS.Blog commenters are always up to defend their console of choice when a whole bunch of them slammed Bethesda for not putting out their DLC on PS3 day-and-date with the 360.  In the article where a Bethesda community manager outlined all the DLC that was coming to the system, members were posting how furious they were for feeling like second-rate customers, and how horrible it was that Bethesda was willing to take money from MS to fund their DLC development.

Meanwhile, 360 users always seem to complain about something over at majornelson.com.  Their posts won't even be related to the article.  Larry Hyrb will post the XBL Deal of the Week, and the first few posts usually contain the sentiments, "When will Gold be free?," "I got banned from XBL, WTF?," or "I just bought a game on XBLA and I can't download it.  Fix this shit Microsoft."
Avatar image for toxikpandakoi
ToxikPandaKoi

114

Forum Posts

191

Wiki Points

0

Followers

Reviews: 2

User Lists: 1

Edited By ToxikPandaKoi

xbox ftw!

Avatar image for pikastar
pikastar

118

Forum Posts

1944

Wiki Points

0

Followers

Reviews: 2

User Lists: 1

Edited By pikastar

Man what a mess. Just hope everything gets fixed up soon

Avatar image for deactivated-5865c6a5c9438
deactivated-5865c6a5c9438

544

Forum Posts

5

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Fuuuuuuck.

Avatar image for super_machine
super_machine

2008

Forum Posts

242

Wiki Points

0

Followers

Reviews: 1

User Lists: 4

Edited By super_machine

Well, balls for sony. In the mean time, I met a super awesome chick and had an awesome first date. PSN goes down, and my personal life goes up. Connection?

Avatar image for inkwolf
inkwolf

77

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By inkwolf

How could the hackers possibly have the passwords?  Only the hashed value of the password should be stored on Sony's servers.  Why would they have any reason to store the plantext password anywhere?  That's rediculous.
Avatar image for ulquiorraschiffer
UlquiorraSchiffer

76

Forum Posts

67

Wiki Points

0

Followers

Reviews: 3

User Lists: 3

@cuevas: Yeah, seriously, some people are such fucking babies. They're hurting the users with this, not sony.
Avatar image for stars2099
Stars2099

23

Forum Posts

1

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Stars2099
Avatar image for spazmaster666
spazmaster666

2114

Forum Posts

42

Wiki Points

0

Followers

Reviews: 9

User Lists: 16

Edited By spazmaster666

Well at least the password that I use for PSN is one of my older passwords that I don't really use anymore.


Also, this probably isn't related (though it is a little ominous), I just tried to login to Bank of America online banking and the site seems to be down . . .
Avatar image for honeycut1
honeycut1

153

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By honeycut1

I find it difficult to believe that Sony had no idea that personal data was compromised until the outside firm told them so.

Avatar image for animateria
animateria

3341

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By animateria
@spazmaster666 said:
" Well at least the password that I use for PSN is one of my older passwords that I don't really use anymore.

Also, this probably isn't related (though it is a little ominous), I just tried to login to Bank of America online banking and the site seems to be down . . .
"
I logged in fine just now.
Avatar image for laugurinn
laugurinn

77

Forum Posts

40

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By laugurinn
@slantedwindows: they won't
Avatar image for yakov456
yakov456

2021

Forum Posts

133

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

Edited By yakov456

I expect to be contacted my many Nigerian Princes in the near future.

Avatar image for shodan2020
shodan2020

966

Forum Posts

6359

Wiki Points

0

Followers

Reviews: 1

User Lists: 14

Edited By shodan2020
@Video_Game_King: @Video_Game_King said:
" Shit. I'd say that this makes me glad that I don't own a PS3, but I still want to play all those cool games. "
Just play them offline, like you used to on your PS2.  Hell, I still fire up my PS2 regularly... still enjoying many great titles. :)
Avatar image for unsolvedparadox
unsolvedparadox

2298

Forum Posts

31

Wiki Points

0

Followers

Reviews: 1

User Lists: 2

Edited By unsolvedparadox

I become more alarmed with every news update (great job, Patrick), and would be extremely reluctant to share any information with Sony ever again. I'll keep using PSN after I change all of my password, but I'll never trust them with my credit card or personal information again.

Avatar image for toowalrus
toowalrus

13408

Forum Posts

29

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

Edited By toowalrus
@super_machine said:
" Well, balls for sony. In the mean time, I met a super awesome chick and had an awesome first date. PSN goes down, and my personal life goes up. Connection? "

I've been balls deep in late homework for a week now, but I feel like if the PSN shortage had really effected my gaming, I would have done the opposite of what you did- gone straight back to Warcraft.
Avatar image for gunslingernz
gunslingerNZ

2010

Forum Posts

300

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

Edited By gunslingerNZ
@Branthog said:
" I wouldn't be too worried about your passwords being exposed. Even Sony can't possibly be so incompetent as to store our passwords in plaintext or with a simple hash. Even the least experienced among us know that at the very least, you encrypt passwords with a salted hash so that they would be very difficult for someone to suss out (and probably computationally prohibitive if you're talking about doing so for 75-million passwords). If this isn't the case and the data was stored either as plaintext or a simple hash (meaning passwords can be exposed using a simple rainbow table attack) then it's a level of negligence that should almost border on criminal.

 http://www.codinghorror.com/blog/2007/09/youre-probably-storing-passwords-incorrectly.html "
Wish GB had an upvote system so I could put this near the top. I'm incredibly pissed off with Sony right now but I'm still hopeful that they weren't so incompetent as to have the passwords stored unencrypted on their servers. Hopefully we get a full rundown on the situation though because the information they've provided so far has been woefully inadequate.

Again the same can be said for the Credit Card info. It should surely have been protected by some sort of strong encryption and if it wasn't then I'm first in line for the class action against Sony.
Avatar image for robothamster
RobotHamster

4284

Forum Posts

1446

Wiki Points

0

Followers

Reviews: 0

User Lists: 11

Edited By RobotHamster

I can just cancel my card and get a new one right?

Avatar image for vextroid
Vextroid

1595

Forum Posts

1219

Wiki Points

0

Followers

Reviews: 0

User Lists: 6

Edited By Vextroid

Its things like this why I dont have/use a credit card.

Change you passwords (regualry, which you should do if you don't, changed my G-Mail as a precaution) and keep eye on your Credit Card statments and records, raise any flags with the bank on anything suspicious (If you don't already.)

Gonna occupy myself with some more Single-player action untill this situation gets under control.

Avatar image for hawk456
Hawk456

153

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Hawk456

Congratulations Gamestop... I will be buying any PSN point cards from you going forward. 
Avatar image for chads92
chads92

8

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By chads92

PC FOR THE WIN

Avatar image for deactivated-5c7ea8553cb72
deactivated-5c7ea8553cb72

4753

Forum Posts

0

Wiki Points

0

Followers

Reviews: 5

User Lists: 0

@super_machine said:
" Well, balls for sony. In the mean time, I met a super awesome chick and had an awesome first date. PSN goes down, and my personal life goes up. Connection? "
Definitely.
Avatar image for silentsnake510
silentsnake510

45

Forum Posts

9

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By silentsnake510

On a scale of one to shitty, this situation is pretty shitty

Avatar image for blastershift
blastershift

78

Forum Posts

40

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

Edited By blastershift

Well the biggest issue I have is that it took them so long to bring this to information out. It should have been said the first or second day.

Oh well my visa is safe and sound

Avatar image for deactivated-5b9fd920ca027
deactivated-5b9fd920ca027

7

Forum Posts

1

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

wooot

Avatar image for punk1984
Punk1984

595

Forum Posts

133

Wiki Points

0

Followers

Reviews: 1

User Lists: 2

Edited By Punk1984
@blastershift said:
" Well the biggest issue I have is that it took them so long to bring this to information out. It should have been said the first or second day.Oh well my visa is safe and sound "
According to them they didn't know until late yesterday.
Avatar image for policenaut
policenaut

32

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

Edited By policenaut

I'm glad I can sit through 800 firmware updates a year so shit can get fucked up anyway.

Avatar image for twoonefive
TwoOneFive

9793

Forum Posts

203

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By TwoOneFive

this is nothing short of epic. 



i hope they find the dickheads responsible and prosecute the shit out of them. 

seriously, what a bunch of loser/assholes. use your fucking computer skills for something worthwhile you fucking dickheads. 
Avatar image for yukoasho
yukoasho

2247

Forum Posts

6076

Wiki Points

0

Followers

Reviews: 6

User Lists: 7

Edited By yukoasho

I think the larger issue here is that, as more and more people surrender more and more of their lives to the nebulous whims of the internet, this sort of stuff is going to keep on happening.  It's been proven again and again that sufficiently determined hackers will try relentlessly to break into systems.

And that's just this incident.  The Amazon Cloud shutdown shows us just how much simple acts of God that once wouldn't effect more than the area where they occurred can now be felt nationwide, and even worldwide, and the prospect of a society free of physical media become nightmarish.

I hope these two incidents have at least some people looking very seriously at the implications of moving our entire way of life onto something so drastically effected by the mercurial fates.

Avatar image for hollitz
hollitz

2398

Forum Posts

5

Wiki Points

0

Followers

Reviews: 1

User Lists: 12

Edited By hollitz

Well this is great news for XBL.  Can't imagine too many people are going to be eager to give PSN any money now.
Avatar image for punk1984
Punk1984

595

Forum Posts

133

Wiki Points

0

Followers

Reviews: 1

User Lists: 2

Edited By Punk1984
@YukoAsho said:
"I hope these two incidents have at least some people looking very seriously at the implications of moving our entire way of life onto something so drastically effected by the mercurial fates. "
It won't by next Monday it will be business as usual for everyone involved but Sony's security, who will have to work a little harder. It is the same reason why people still eat Big Macs after they've been proven to have fecal matter in them. It is just easier to get a Big Mac than grill your own. "Easier" wins over "Common Sense" every time.

Earlier this evening I thought this hack could have last repercussions from Sony. After reading the boards and seeing the same system centric biases I'm pretty sure it will be over before you know it.
Avatar image for yukoasho
yukoasho

2247

Forum Posts

6076

Wiki Points

0

Followers

Reviews: 6

User Lists: 7

Edited By yukoasho
@Punk1984 said:
" @YukoAsho said:
"I hope these two incidents have at least some people looking very seriously at the implications of moving our entire way of life onto something so drastically effected by the mercurial fates. "
It won't by next Monday it will be business as usual for everyone involved but Sony's security, who will have to work a little harder. It is the same reason why people still eat Big Macs after they've been proven to have fecal matter in them. It is just easier to get a Big Mac than grill your own. "Easier" wins over "Common Sense" every time.

Earlier this evening I thought this hack could have last repercussions from Sony. After reading the boards and seeing the same system centric biases I'm pretty sure it will be over before you know it.
"
Well, forums are cesspools, so I try to not base my opinions on them.  Let's be honest, the only difference between Giant Bomb and most other game sites is that the moderators at least try not to let it descend into chaos.  While some console zombies (and probably the Bombcast crew) will be back to extoling how download only is THE ONLY FUTURE and how those of us resisting are holding everything back, I'm sure there will be people outside of the echo chamber at least considering this.  I think back to the supposed "paperless society."  Remember that a few years back?  How we wouldn't need paper anymore because we could just store all our documents on our computers?  Instead, people used more paper than ever because they wanted hard copies.  The "digital future" might just end up being another pipe dream like the "paperless society."  At least we can hope.
Avatar image for tadthuggish
TadThuggish

1073

Forum Posts

334

Wiki Points

0

Followers

Reviews: 2

User Lists: 41

Edited By TadThuggish

It was only about a week ago that I finally admitted that the PS3 was on par with the 360 in terms of online content.


When I get home, I may sell the thing.  Or burn it.  I can't believe this shit.
Avatar image for punk1984
Punk1984

595

Forum Posts

133

Wiki Points

0

Followers

Reviews: 1

User Lists: 2

Edited By Punk1984
@YukoAsho: I hope you're right, there is a woman at my office who prints out every email she gets...I weep for the forests. However outside of the echo chamber let's be honest most people will ignore this and go on about their day, week, year. The problem comes in any lasting damage to Sony's brand image. We will know in the next few weeks if that will happen. If this is a huge blemish on the digital age maybe people will notice (people know about RROD) but I don't think that will happen. Like I said Monday after next no one will care.
Avatar image for tightestjeans
tightestjeans

31

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By tightestjeans
Avatar image for kalmis
kalmis

1745

Forum Posts

6127

Wiki Points

0

Followers

Reviews: 115

User Lists: 6

Edited By kalmis
@RobotHamster said:
" I can just cancel my card and get a new one right? "
No, but you can report your card to be stolen. Then you should get new one.
Avatar image for bluefroman
bluefroman

74

Forum Posts

227

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By bluefroman
@slantedwindows: Everyone should get free Playstation plus for life.