Giant Bomb News

714 Comments

Good News: PSN Back (Maybe) Within a Week, Bad News: Everything Else [Updated]

Sony confirms personal information obtained by outside party. That's fantastic.


No Caption Provided
Update 3: Valve has just told me that anyone who connected their PlayStation Network account to Steam via Portal 2 should not be worried, either. 

"Steam has nothing to do with the PSN outage," said the company in the statement.

Update 2: Regarding rumors Sony may have notified banks days ahead of disclosing today's revelations to the public, I have since contacted customer service representatives at both Bank of America and Chase. I personally have accounts at both financial firms and the representatives claimed to have received no information from Sony about a mass breach of credit information.

Update:  For those who were asking, Sony has just confirmed to me there is currently no way to determine what password you were/are using on PSN. If you're worried at all, you should probably change your password used across the Internet.

Some users have suggested counting the number of "stars" in your saved password as a way to help determine what password you may have been using to access PSN. It's a start.

**

Sony has been frustratingly quiet about the problems afflicting PlayStation Network since the downtime started last week. Who caused the issue in the first place? When will the service be back online? More importantly, has the disruption opened up my personal information to the intruders?

One, Sony isn't talking specifics, with the latest update on the PlayStation Blog from senior director of corporate communications and social media Patrick Seybold only outlining that the company has identified "a compromise of personal information as a result of an illegal intrusion on our systems."

Two, probably within a week--at least for some parts of PSN. "We have a clear path to have PlayStation Network and Qriocity systems back online, and expect to restore some services within a week," said Seybold. "We’re working day and night to ensure it is done as quickly as possible."

Three, the answer is yes. Here's what was available to intruders: "name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID." It's also "possible" that "your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers" were included.

Unfortunately, credit card details remain a mystery. "While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility," added Seybold. "If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained."

== TEASER ==The continued air of "possibility" regarding how severely PSN was compromised, several work days and a full weekend after PSN initially went down, is not a particularly reassuring concept. I'd implore you to read Sony's full statement on the matter at the PlayStation Blog, as the company has complete details on what companies to contact regarding credit card fraud, should you notice any errant activity.

"We thank you for your patience as we complete our investigation of this incident, and we regret any inconvenience," reads the end of the statement. "Our teams are working around the clock on this, and services will be restored as soon as possible. Sony takes information protection very seriously and will continue to work to ensure that additional measures are taken to protect personally identifiable information."

Stay tuned as more developments unfold. If you notice your personal information was compromised, feel free to drop us an email or leave a comment below.
Patrick Klepek on Google+

714 Comments

Avatar image for patrickklepek
patrickklepek

6833

Forum Posts

1300

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By patrickklepek

No Caption Provided
Update 3: Valve has just told me that anyone who connected their PlayStation Network account to Steam via Portal 2 should not be worried, either. 

"Steam has nothing to do with the PSN outage," said the company in the statement.

Update 2: Regarding rumors Sony may have notified banks days ahead of disclosing today's revelations to the public, I have since contacted customer service representatives at both Bank of America and Chase. I personally have accounts at both financial firms and the representatives claimed to have received no information from Sony about a mass breach of credit information.

Update:  For those who were asking, Sony has just confirmed to me there is currently no way to determine what password you were/are using on PSN. If you're worried at all, you should probably change your password used across the Internet.

Some users have suggested counting the number of "stars" in your saved password as a way to help determine what password you may have been using to access PSN. It's a start.

**

Sony has been frustratingly quiet about the problems afflicting PlayStation Network since the downtime started last week. Who caused the issue in the first place? When will the service be back online? More importantly, has the disruption opened up my personal information to the intruders?

One, Sony isn't talking specifics, with the latest update on the PlayStation Blog from senior director of corporate communications and social media Patrick Seybold only outlining that the company has identified "a compromise of personal information as a result of an illegal intrusion on our systems."

Two, probably within a week--at least for some parts of PSN. "We have a clear path to have PlayStation Network and Qriocity systems back online, and expect to restore some services within a week," said Seybold. "We’re working day and night to ensure it is done as quickly as possible."

Three, the answer is yes. Here's what was available to intruders: "name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID." It's also "possible" that "your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers" were included.

Unfortunately, credit card details remain a mystery. "While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility," added Seybold. "If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained."

== TEASER ==The continued air of "possibility" regarding how severely PSN was compromised, several work days and a full weekend after PSN initially went down, is not a particularly reassuring concept. I'd implore you to read Sony's full statement on the matter at the PlayStation Blog, as the company has complete details on what companies to contact regarding credit card fraud, should you notice any errant activity.

"We thank you for your patience as we complete our investigation of this incident, and we regret any inconvenience," reads the end of the statement. "Our teams are working around the clock on this, and services will be restored as soon as possible. Sony takes information protection very seriously and will continue to work to ensure that additional measures are taken to protect personally identifiable information."

Stay tuned as more developments unfold. If you notice your personal information was compromised, feel free to drop us an email or leave a comment below.
Avatar image for venatio
Venatio

4752

Forum Posts

288

Wiki Points

0

Followers

Reviews: 0

User Lists: 6

Edited By Venatio

Crap

Avatar image for roborobb
roborobb

1096

Forum Posts

433

Wiki Points

0

Followers

Reviews: 4

User Lists: 3

Edited By roborobb

uh oh..

Avatar image for ssully
SSully

5753

Forum Posts

315

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

Edited By SSully

Wow, this is amazing that sony let this happen. I hope to god none of my info was compromised. 

Avatar image for make_me_mad
Make_Me_Mad

3229

Forum Posts

1007

Wiki Points

0

Followers

Reviews: 1

User Lists: 11

Edited By Make_Me_Mad

So, is this going to affect only PS3 users, or do the people who bought things from the PSP's online store also need to worry?  If it goes that far, I'll be needing to give my brother a call shortly.

Avatar image for phatseejay
PhatSeeJay

3331

Forum Posts

9727

Wiki Points

0

Followers

Reviews: 5

User Lists: 17

Edited By PhatSeeJay

Great...

Avatar image for fcksnap
FCKSNAP

2338

Forum Posts

844

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By FCKSNAP

[Removed]

Avatar image for cuevas
cuevas

48

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By cuevas

Fucking assholes. (The hackers, not Sony)

Avatar image for slantedwindows
slantedwindows

282

Forum Posts

124

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By slantedwindows

sooo... how will sony be making reparations for this?

Avatar image for nissanskyline
NissanSkyline

130

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By NissanSkyline

Just when i got MK9 this shit happens, hope nothing serious was stolen

Avatar image for dck
dck

51

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By dck

Well, fuck you Sony. XBL only purchases from now on.

Avatar image for jmartnwa
JMartNWA

208

Forum Posts

18

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

Edited By JMartNWA

Wow, it appears things are turning towards catastrophic level now.  A huge release week and no one able to play online was bad enough, but potential identity theft?  Let's just say that will not go over well.

Avatar image for johndudebro
JohnDudebro

956

Forum Posts

3908

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By JohnDudebro

This is fucking unacceptable.


How did Sony fuck up security so badly that this was possible in the first place?
Avatar image for phished0ne
Phished0ne

2962

Forum Posts

1841

Wiki Points

0

Followers

Reviews: 0

User Lists: 7

Edited By Phished0ne

:(

Avatar image for mosdl
mosdl

3422

Forum Posts

2951

Wiki Points

0

Followers

Reviews: 3

User Lists: 5

Edited By mosdl

Luckily, in the US at least, they will have to cover any legal costs should you get compromised.

Avatar image for dtat
Dtat

1750

Forum Posts

546

Wiki Points

0

Followers

Reviews: 1

User Lists: 9

Edited By Dtat

So do we all get compensated if our information was stolen and someone steals from us? Sounds like something Sony should do.

Avatar image for treythalomew
Treythalomew

101

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By Treythalomew

This is crazy talk. If there was any indication that they could have gotten any personal info/CC then they should have said something day one or day two.

Avatar image for tennmuerti
Tennmuerti

9465

Forum Posts

1

Wiki Points

0

Followers

Reviews: 1

User Lists: 7

Edited By Tennmuerti

Well this fucking sucks...

Avatar image for rockinkemosabe
rockinkemosabe

648

Forum Posts

4

Wiki Points

0

Followers

Reviews: 0

User Lists: 7

Edited By rockinkemosabe

Shit. I knew I shouldn't of bought that fucking Dead Space 2 DLC.

Avatar image for animateria
animateria

3341

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By animateria

Well, I guess I should change my password at the very least that's for sure.

Avatar image for chrisincali
ChrisInCali

151

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By ChrisInCali

This is why I never give me CC info to Xbox or PS3, and always buy point cards at stores instead.

Avatar image for choffy
Choffy

484

Forum Posts

2484

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By Choffy

This is bullshit. Strongly considering leaving PSN if my information isn't safe. If it's happened once, why can't it happen again?

Avatar image for silvershadow
SilverShadow

219

Forum Posts

909

Wiki Points

0

Followers

Reviews: 1

User Lists: 6

Edited By SilverShadow

I smell a class-action lawsuit! Who's with me?!
Avatar image for hackjob135
Hackjob135

66

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By Hackjob135

ffffffffuck.

Avatar image for randominternetuser
RandomInternetUser

6805

Forum Posts

769

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Jesus Christ. I see lawsuits headed their way.

Avatar image for rmanthorp
rmanthorp

4652

Forum Posts

3603

Wiki Points

0

Followers

Reviews: 1

User Lists: 14

Edited By rmanthorp  Moderator

LAWL

This sucks...
Avatar image for darktravesty
DarkTravesty

333

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By DarkTravesty
@Make_Me_Mad:  the psp store is part of the playstation network. so to be safe i'd give him a call.
@Snapstacle:  and i'd rather pay $30-$40 for xbox live than have my identity stolen and credit rating ruined.
Avatar image for elcalavera
elcalavera

392

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 3

Edited By elcalavera

Well done, Sony.

Avatar image for blair
blair

2265

Forum Posts

3572

Wiki Points

0

Followers

Reviews: 1

User Lists: 2

Edited By blair

What a tremendous fuck-up.

Avatar image for mattyftm
MattyFTM

14913

Forum Posts

67415

Wiki Points

0

Followers

Reviews: 4

User Lists: 11

Edited By MattyFTM  Moderator

It might have been a smart move to let people know that their personal information, possibly including credit card info, had been stolen as soon as it happened. Waiting 5 days before telling anyone about it is amazingly dumb. 

Avatar image for altairre
altairre

1492

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By altairre

I was about to buy my first DLC via PSN. This would have been my first buy ever and now I am actually glad that PSN went down down before I could purchase this thin. Nevertheless this is a horrible thing for both, Sony and all the users.

Avatar image for the8bitnacho
the8bitNacho

2304

Forum Posts

6388

Wiki Points

0

Followers

Reviews: 28

User Lists: 2

Edited By the8bitNacho

I don't understand how Sony's security measures could really be this atrocious. And it is absolutely disgusting that it has taken them this long to come out and say just how much personal information was compromised, which seems to read as "potentially all of it."

Avatar image for thebatmobile
thebatmobile

995

Forum Posts

330

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By thebatmobile

This is pretty insane.

Avatar image for ladyshayne
LadyShayne

157

Forum Posts

12

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By LadyShayne

I don't remember, but does PSN force you to provide credit card info during sign up regardless of if you're buying a game or not? Since I've only used PSN cards at least I could find solace in having that information safe.

Avatar image for killgiver
KillGiver

75

Forum Posts

14

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

Edited By KillGiver

Patrick you just officially made Giantbomb  the place to go for news as long as it doesn't get blocked by my work IT department.

Avatar image for zimbo
Zimbo

872

Forum Posts

15

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Zimbo

Well, that just fucking sucks. Good thing it was only my expired debit card tied to the account. Also, time to change email passwords!

Man, Sony is going to get hell for this I imagine.

Avatar image for admanb
admanb

245

Forum Posts

108

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By admanb

Hahahaha what. Sony, there is this thing called "encryption" that you may want to look into. It stops you from storing plain text passwords for all of your customers!

Avatar image for marcsman
Marcsman

3823

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By Marcsman

This is bad
Avatar image for sparklykiss
sparklykiss

2042

Forum Posts

3618

Wiki Points

0

Followers

Reviews: 5

User Lists: 8

Edited By sparklykiss
@ChrisInCali said:
" This is why I never give me CC info to Xbox or PS3, and always buy point cards at stores instead. "
This! But as for the other news about any other information being stolen?

FFFFFFFFFFFFFFFFFFFFFU-
Avatar image for blipp18
BLipp18

336

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By BLipp18

thanks alot Anonymous. Even if they didnt do this themselves, they planted the idea in the stupid ******** hackers heads who did this. But no, its all worth it! take down sony b/c you couldnt install your precious "Other OS"! Screw everyone over b/c you wanted to protect your "rights" WHICH YOU DONT HAVE BECAUSE HACKING IS ILLEGAL!

Avatar image for fcksnap
FCKSNAP

2338

Forum Posts

844

Wiki Points

0

Followers

Reviews: 0

User Lists: 4

Edited By FCKSNAP
@DarkTravesty said:
" @Snapstacle:  and i'd rather pay $30-$40 for xbox live than have my identity stolen and credit rating ruined. "
U MAD BRO?
Avatar image for general_d23
General_D23

1210

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By General_D23

Fucking HELL, Sony. Utterly ridiculous.

Avatar image for the8bitnacho
the8bitNacho

2304

Forum Posts

6388

Wiki Points

0

Followers

Reviews: 28

User Lists: 2

Edited By the8bitNacho
@Make_Me_Mad I'm fairly certain that PSN and the PSP store use the same account information.
Avatar image for napalmtrees
napalmtrees

86

Forum Posts

26

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By napalmtrees

Great, two weeks after I get a PS3 and three weeks before I leave for Basic.  Thanks Sony!

Avatar image for fira
Fira

35

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By Fira

maybe it is time to switch to the xbox. how does sony keep fucking stuff up like this?

Avatar image for allenibrahim
allenibrahim

384

Forum Posts

126

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

Edited By allenibrahim

I can't believe this is happening. Sony is going to get smacked with the BIGGEST class action lawsuit they've ever seen. And the fact that they waited so long to update everyone about it is MESSED UP

Avatar image for neoepoch
neoepoch

1317

Forum Posts

13

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

Edited By neoepoch

Does this mean that if we linked our Steam Accounts with our PSN IDs that those passwords are now compromised? I guess I need to change all my passwords and get new bank cards.

Avatar image for themailtoad
TheMailToad

19

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By TheMailToad

Well, looks like I'm never trusting Sony with any personal info again.

Avatar image for mjames70
MJames70

40

Forum Posts

6

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By MJames70

What will all those people who were saying yesterday that there was no chance of this, it was just some hackers getting goodies for free say now? Fortunately my exposure on PSN was limited in that the login/PW is not good on any other sites, but it is still alarming and frustrating....this is after being caught up in Kotaku's **** up info breach a few months back. Trust no one online seems to be the only recourse...

Avatar image for fritzdude
FritzDude

2316

Forum Posts

3064

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

Edited By FritzDude

Crazy.