Sony PlayStation Network and Qriocity users have had to go without service since last Wednesday when Sony shut down the services due to a hacker attack. In an update today, Sony admitted that everything from user names to credit card numbers may have been compromised:
Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information that you provided: name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID. It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have been obtained.
If you have authorized a sub-account for your dependent, the same data with respect to your dependent may have been obtained. While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained.
Their does seem to be some light at the end of the tunnel for PSN users as the post also states that the down Sony services could be restored within a week.
But one has to ask, who was behind this? Sony seemed to gain the attention of hacker group “Anonymous” earlier this month when the console manufacturer took legal action against people performing hardware hacking and software modifications on their PS3 system. Not only did Anonymous take down the Sony sites, but in a new wrinkle, they were also planning physical protests at Sony stores.
The official news from Anonymous? “For once we didn’t do it“, though they do mention in the news update that it could have been single anonymous members working on their own, but other than the DDoS, they claim they didn’t do it.
Hackers have been known to flood a system and tie it up with a Denial of Service attacks to help disguise actual intrusion attempts.
So far Sony is closed lip about any prospects, which is to be expected, and the FBI apparently has not made any arrests contrary to numerous reports circulating on the web. But one thing is for certain, Anonymous has really drawn the ire of PlayStation users that just want to play their gaming system online.