Hack Attempt On Sony

Avatar image for shinjiex
ShinjiEx

793

Forum Posts

7

Wiki Points

0

Followers

Reviews: 16

User Lists: 0

#1  Edited By ShinjiEx

Possibly 93,000 world wide may be affective as a "3rd party" tried to sign into Sony Online Services such PSN & SOE

Those account have been locked out as a result by Sony if you been affected check your email for further instructions

 
 
The Long Version

"We want to let you know that we have detected attempts on Sony Entertainment Network, PlayStation Network and Sony Online Entertainment (“Networks”) services to test a massive set of sign-in IDs and passwords against our network database. These attempts appear to include a large amount of data obtained from one or more compromised lists from other companies, sites or other sources. In this case, given that the data tested against our network consisted of sign-in ID-password pairs, and that the overwhelming majority of the pairs resulted in failed matching attempts, it is likely the data came from another source and not from our Networks. We have taken steps to mitigate the activity.

Less than one tenth of one percent (0.1%) of our PSN, SEN and SOE audience may have been affected. There were approximately 93,000 accounts globally (PSN/SEN: approximately 60,000 accounts; SOE: approximately 33,000) where the attempts succeeded in verifying those accounts’ valid sign-in IDs and passwords, and we have temporarily locked these accounts. Only a small fraction of these 93,000 accounts showed additional activity prior to being locked. We are currently reviewing those accounts for unauthorized access, and will provide more updates as we have them. Please note, if you have a credit card associated with your account, your credit card number is not at risk. We will work with any users whom we confirm have had unauthorized purchases made to restore amounts in the PSN/SEN or SOE wallet.

As a preventative measure, we are requiring secure password resets for those PSN/SEN accounts that had both a sign-in ID and password match through this attempt. If you are in the small group of PSN/SEN users who may have been affected, you will receive an email from us at the address associated with your account that will prompt you to reset your password.

Similarly, the SOE accounts that were matched have been temporarily turned off. If you are among the small group of affected SOE customers, you will receive an email from us at the address associated with your account that will advise you on next steps in order to validate your account credentials and have your account turned back on.

We want to take this opportunity to remind our consumers about the increasingly common threat of fraudulent activity online, as well as the importance of having a strong password and having a username/password combination that is not associated with other online services or sites. We encourage you to choose unique, hard-to-guess passwords and always look for unusual activity in your account."

Avatar image for ravenlight
Ravenlight

8057

Forum Posts

12306

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

#2  Edited By Ravenlight

What, again?

Avatar image for mercy_
Mercy_

258

Forum Posts

1

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#3  Edited By Mercy_

Hasn't this already happened like, twice?

Avatar image for muerthoz
Muerthoz

373

Forum Posts

295

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

#4  Edited By Muerthoz
http://blog.us.playstation.com/2011/10/11/an-important-message-from-sonys-chief-information-security-officer/
Avatar image for deactivated-629eab11cc270
deactivated-629eab11cc270

1671

Forum Posts

521

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

HAHAHAHAHAHAHAHAHAHAHAHAHAHAHA

what the fuck

Avatar image for sign
Sign

306

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#6  Edited By Sign

@Ravenlight said:

What, again?

Not really, this is just someone trying to brute force a list of usernames and passwords they have acquired elsewhere. Sony hasn't been hacked or anything like that. They are actually being smart and locking out the account to bring the persons attention to the fact that their credentials from somewhere have been compromised.

Avatar image for smitty86
smitty86

708

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#7  Edited By smitty86

@Sign said:

@Ravenlight said:

What, again?

Not really, this is just someone trying to brute force a list of usernames and passwords they have acquired elsewhere. Sony hasn't been hacked or anything like that. They are actually being smart and locking out the account to bring the persons attention to the fact that their credentials from somewhere have been compromised.

This. But facts won't stop the inevitable console war that always seems to follow.

Avatar image for awe_stuck
awe_stuck

820

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

#8  Edited By awe_stuck

@smitty86 said:

@Sign said:

@Ravenlight said:

What, again?

Not really, this is just someone trying to brute force a list of usernames and passwords they have acquired elsewhere. Sony hasn't been hacked or anything like that. They are actually being smart and locking out the account to bring the persons attention to the fact that their credentials from somewhere have been compromised.

This. But facts won't stop the inevitable console war that always seems to follow.

What console war? This is cus Sony sued Geohot and told off the global hacking population (Linux users).

Avatar image for iam3green
iam3green

14368

Forum Posts

350

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#9  Edited By iam3green

wow pretty crazy they are being hacked again. not really hacked but looked on.

Avatar image for re_player1
RE_Player1

8074

Forum Posts

1047

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#10  Edited By RE_Player1

I'm glad they are taking the necessary measures.

Avatar image for n7
N7

4159

Forum Posts

23

Wiki Points

0

Followers

Reviews: 4

User Lists: 2

#11  Edited By N7

They didn't get hacked. Someone hacked some random website, stole usernames, passwords and email addresses and started throwing things at the PSN to see what stuck. In fact, I doubt this is exclusive to the PSN. They probably tried everything from Netflix to Xbox Live.

TL;DR: Nothing happened.

Avatar image for mcshank
McShank

1700

Forum Posts

920

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

#12  Edited By McShank

Now i know why i was kicked off PSN while on dark souls and it wont let me back on. Awesome!

Avatar image for hizang
Hizang

9475

Forum Posts

8249

Wiki Points

0

Followers

Reviews: 22

User Lists: 15

#13  Edited By Hizang

Wait what?

Avatar image for tim_the_corsair
tim_the_corsair

3053

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

#14  Edited By tim_the_corsair

Seems like they handled it well, if nothing else their PR has improved after the last shambles.

Avatar image for awe_stuck
awe_stuck

820

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

#15  Edited By awe_stuck

@N7 said:

They didn't get hacked. Someone hacked some random website, stole usernames, passwords and email addresses and started throwing things at the PSN to see what stuck. In fact, I doubt this is exclusive to the PSN. They probably tried everything from Netflix to Xbox Live.

TL;DR: Nothing happened.

This is a method of hacking. hence 2nd or 3rd party hacking. you dont hack the site, you hack something connected to it that gives you access to what you want. But ya, whatever. XBL isnt hack proof, its just easy to fix when crap hits the fan.

Avatar image for n7
N7

4159

Forum Posts

23

Wiki Points

0

Followers

Reviews: 4

User Lists: 2

#16  Edited By N7

@awe_stuck said:

@N7 said:

They didn't get hacked. Someone hacked some random website, stole usernames, passwords and email addresses and started throwing things at the PSN to see what stuck. In fact, I doubt this is exclusive to the PSN. They probably tried everything from Netflix to Xbox Live.

TL;DR: Nothing happened.

This is a method of hacking. hence 2nd or 3rd party hacking. you dont hack the site, you hack something connected to it that gives you access to what you want. But ya, whatever. XBL isnt hack proof, its just easy to fix when crap hits the fan.

Indeed. But it's better than having some sort of surgical strike from within the network itself.

I mean, Sony's already handled this mess before it began. Sounds successful to me!

Avatar image for nekusakuraba
NekuSakuraba

7810

Forum Posts

1670

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

#17  Edited By NekuSakuraba

@N7 said:

They didn't get hacked. Someone hacked some random website, stole usernames, passwords and email addresses and started throwing things at the PSN to see what stuck. In fact, I doubt this is exclusive to the PSN. They probably tried everything from Netflix to Xbox Live.

TL;DR: Nothing happened.

What does that accomplish?

Avatar image for babychoochoo
BabyChooChoo

7106

Forum Posts

2094

Wiki Points

0

Followers

Reviews: 2

User Lists: 2

#18  Edited By BabyChooChoo

@NekuSakuraba said:

@N7 said:

They didn't get hacked. Someone hacked some random website, stole usernames, passwords and email addresses and started throwing things at the PSN to see what stuck. In fact, I doubt this is exclusive to the PSN. They probably tried everything from Netflix to Xbox Live.

TL;DR: Nothing happened.

What does that accomplish?

Most people stupidly use the same username AND password for many things. If you can sign onto another service with the same info then BAM, you got another account to mess with.

Also, I can't wait to see people blow this out of proportion. I'm willing to bet this story will be on every game site by morning with 95% of the commenters never reading the story to begin with. Also, that first part was sarcasm. I really don't want to see this on every site and I really don't want to see thousands of people acting stupid.

Avatar image for awe_stuck
awe_stuck

820

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

#19  Edited By awe_stuck

@N7 said:

@awe_stuck said:

@N7 said:

They didn't get hacked. Someone hacked some random website, stole usernames, passwords and email addresses and started throwing things at the PSN to see what stuck. In fact, I doubt this is exclusive to the PSN. They probably tried everything from Netflix to Xbox Live.

TL;DR: Nothing happened.

This is a method of hacking. hence 2nd or 3rd party hacking. you dont hack the site, you hack something connected to it that gives you access to what you want. But ya, whatever. XBL isnt hack proof, its just easy to fix when crap hits the fan.

Indeed. But it's better than having some sort of surgical strike from within the network itself.

I mean, Sony's already handled this mess before it began. Sounds successful to me!

At least they had firewalls this time.

If you read the stuff released in court by the independent security company that fixed the Sony network its pretty interesting. Sony didnt actually have firewalls protecting the PSN servers (when PSN was down for so long).... And, they only encrypted the credit card numbers, not most of the other information. In other words because PSN was free, they didnt have enough people on their engineering team to actually make sure the security was kept up to date. In fact they spent so little money making sure it was set up properly that they didnt even install firewalls. Thats not good to me, thats sound like a disaster. FYI Xbox has only been down for about 2 days tops most of the time.

Avatar image for nekusakuraba
NekuSakuraba

7810

Forum Posts

1670

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

#20  Edited By NekuSakuraba

@BabyChooChoo said:

@NekuSakuraba said:

@N7 said:

They didn't get hacked. Someone hacked some random website, stole usernames, passwords and email addresses and started throwing things at the PSN to see what stuck. In fact, I doubt this is exclusive to the PSN. They probably tried everything from Netflix to Xbox Live.

TL;DR: Nothing happened.

What does that accomplish?

Most people stupidly use the same username AND password for many things

Also, I can't wait to see people blow this out of proportion. I'm willing to bet this story will be on every game site by morning with 95% of the commenters never reading the story to begin with. Also, that first part was sarcasm. I really don't want to see this on every site and I really don't want to see thousands of people acting stupid.

Makes sense, luckily Sony took action on it however.

Avatar image for pinworm45
Pinworm45

4069

Forum Posts

350

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

#21  Edited By Pinworm45

@msavo said:

I'm glad they are taking the necessary measures.

Sony is definitely a company you can trust to take the necessary measures.

Avatar image for fritzdude
FritzDude

2316

Forum Posts

3064

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#22  Edited By FritzDude

So is this a new or an old list of compromised usernames & passwords?

Avatar image for theinsider
TheInsider

55

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#23  Edited By TheInsider

Think it's old because none of the combinations worked

Avatar image for bybeach
bybeach

6754

Forum Posts

1

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

#24  Edited By bybeach

This is not a hack. Even I know the difference here. Could lead to something of that name, though.

Avatar image for bravetoaster
BraveToaster

12636

Forum Posts

250

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

#25  Edited By BraveToaster

Don't these things happen to companies all the time?