PSN Hacked 80710A06 8002A203

[DJ-Daz]

So it looks like PSN is staying down for at least a week yet.

[YorkshirePud]

i genuinely feel sorry for the ground troops at sony the poor sods who do the normal maintenance, they must be running around with their hair on fire. i dont feel sorry for the people who designed it.,

[theENIGMATRON]

i genuinely feel sorry for the ground troops at sony the poor sods who do the normal maintenance, they must be running around with their hair on fire. i dont feel sorry for the people who designed it.,

See i feel pretty much sorry for everyone.
Understand that everything has floors, and a stupid mistake to not encrypt there data.

But i can only imaging what it would be like there.
I know when our Data Centres go down for CC payments, the office is on Fire.

Times our biggest issues by like a trillion for them it being the biggest data breach in history it must be hell!!
I can imaging trails of hair on the floor that people are loosing on the way

[InfiniteStates]

Sucks for them it happens during the UK's main bank holiday season too - I bet they're not getting two 4-day weekends back to back

[DJ-Daz]

Apparently the banks were notified on the 19th of the breach...

We’re starting to hear, from banks, that they were alerted to the intrusion on or around the 19th, comments from TSA members and beyond suggesting that Sony informed the financial institutions even before they switched off the authentication service on the PSN. We can’t verify this ourselves, but based on what we’re hearing, this is starting to gain ground.

http://www.thesixthaxis.com/2011/04/28/ ... lack-hole/

[InfiniteStates]

It’s true to say that this loss is causing a huge problem for Sony. I’m not personally too worried about identity theft or the data that could potentially be seen. Aside from my credit card number, all the data they had access to could have been gathered just as easily by picking through my bins. There will be many who have even more sensitive data than the stuff Sony lost, in public view, on their Facebook pages.

But think about this – if the information is distilled into a searchable list, what’s to say that the next time you’re online the person you’re playing against can’t look up your PSN ID, get your real name and start taunting you? They’ll know your real address, your birthday. And if they’re linked in the database, they’ll know the details of your dependents and sub accounts. It’s this uncertainty that breeds this speculation and Sony’s reluctance to offer comprehensive information only serves to compound that issue.

There's a silver lining!! It means I can find out where that little 10 year old gob shite camper that keeps TK'ing me lives and fuck up his day


EDIT: Finished the article now, and pretty much agree with it 100%.

[DJ-Daz]

More from rumour central:
Credit card details are being sold for $100,000 and the hacker or hackers responsible contacted Sony to sell the details back, but Sony are not interested or not responding.

Again, it's only a rumour, but one that comes from Trend Micro:
http://bits.blogs.nytimes.com/2011/04/2 ... card-data/

[Astro]

More from rumour central:
Credit card details are being sold for $100,000 and the hacker or hackers responsible contacted Sony to sell the details back, but Sony are not interested or not responding.

Again, it's only a rumour, but one that comes from Trend Micro:
http://bits.blogs.nytimes.com/2011/04/2 ... card-data/

Meh I ordered a replacement debit card anyway.

[DJ-Daz]

Just read a very interesting article, it's quite long, but it says what everyone, I think, is thinking.
http://www.gamasutra.com/view/news/34348/

[DJ-Daz]

And more bad news from Sony: CCV numbers were collected (I thought they were/must be collected, otherwise they couldn't withdraw funds) but NOT stored in the database.
Knowing how Sony stores data, the numbers were probably in a plain text file with comma separated values.
Just read the second response:
http://blog.us.playstation.com/2011/04/ ... -services/

This makes it so easy to buy online now.

[DJ-Daz]

There is going to be an official announcement tomorrow on TV.
Now the time is 2PM Tokyo time which is 8 hours ahead, so it'll be 6am here.

I dont think I'll be awake for it, so no doubt it'll be online later.

http://uk.mobile.reuters.com/article/ar ... Q320110430

[InfiniteStates]

I'm sure I read somewhere that the FBI in one US city were on the case (along with others from other countries). Sony should make more of that to put the shitters on the hackers. Not clever to sell data while being hunted...

[InfiniteStates]

There is going to be an official announcement tomorrow on TV.

I can't find the video anywhere, but BBC didn't report anything specifically substantial...

1 May 2011 Last updated at 07:50

Sony to resume some PlayStation gaming services

Sony has said it will resume some services on its PlayStation Network, which was shut after the theft of personal details of about 77m users.

Sony officials said they had boosted the security of their computer systems after user names, email addresses and log-in details were stolen.

Executives, including Kazuo Hirai, the head of Sony's PlayStation unit, apologised for the security breach.

The theft has prompted legal action and investigations in the US and Europe.

"The organisation has worked around the clock to bring these services back on line and are doing so only after we had verified increased levels of security across our networks," said Mr Hirai in a statement.

He is seen as the frontrunner to take over as head of Sony Corp.
Deep bow

"These illegal attacks obviously highlight the widespread problem with cyber-security," Mr Hirai's statement said.
The head of Sony's PlayStation unit, Kazuo Hirai, bows in apology in Tokyo, Japan - 1 May 2011 Kazuo Hirai is seen as a frontrunner to take over Sony Corp

Later, at a news conference, Mr Hirai and two other Sony executives apologised and bowed deeply.

"We apologise deeply for causing great unease and trouble to our users," he said.

PlayStation users got their first indication that something was wrong with the service when it became unavailable on 20 April.

In the following days, Sony issued three brief statements asking users to be patient while it investigated an "external intrusion", or hack.

The full extent of the security breach became apparent on 27 April.

In a statement posted on the official PlayStation blog, the company said user account information for the PlayStation Network and Qriocity services had been compromised following an "illegal and unauthorized intrusion into our network".

Sony said that although credit card data was encrypted and there was no evidence it was stolen, the theft of the data could not be ruled out.

The PlayStation network allows gamers to download software and play with other users.

[DJ-Daz]

News from Tokyo, it's a long read:

This morning, a press conference took place in Tokyo, Japan and the following press release is now being distributed worldwide.

We would also like to once again thank you for your patience.


SOME PLAYSTATION NETWORK AND QRIOCITY SERVICES TO BE AVAILABLE THIS WEEK

Phased Global Rollout of Services to Begin Regionally; System Security Enhanced to Provide Greater Protection of Personal Information.

Tokyo, May 1, 2011 – Sony Computer Entertainment (SCE) and Sony Network Entertainment International (SNEI, the company) announced they will shortly begin a phased restoration by region of PlayStation®Network and Qriocity™ services, beginning with gaming, music and video services to be turned on. The company also announced both a series of immediate steps to enhance security across the network and a new customer appreciation program to thank its customers for their patience and loyalty.

Following a criminal cyber-attack on the company’s data-center located in San Diego, California, U.S.A., SNEI quickly turned off the PlayStation Network and Qriocity services, engaged multiple expert information security firms over the course of several days and conducted an extensive audit of the system. Since then, the company has implemented a variety of new security measures to provide greater protection of personal information. SNEI and its third-party experts have conducted extensive tests to verify the security strength of the PlayStation Network and Qriocity services. With these measures in place, SCE and SNEI plan to start a phased rollout by region of the services shortly. The initial phase of the rollout will include, but is not limited to, the following:

• Restoration of Online game-play across the PlayStation®3 (PS3) and PSP® (PlayStation®Portable) systems
• This includes titles requiring online verification and downloaded games
• Access to Music Unlimited powered by Qriocity for PS3/PSP for existing subscribers
• Access to account management and password reset
• Access to download un-expired Movie Rentals on PS3, PSP and MediaGo
• PlayStation®Home
• Friends List
• Chat Functionality

Working closely with several outside security firms, the company has implemented significant security measures to further detect unauthorized activity and provide consumers with greater protection of their personal information. The company is also creating the position of Chief Information Security Officer, directly reporting to Shinji Hasejima, Chief Information Officer of Sony Corporation, to add a new position of expertise in and accountability for customer data protection and supplement existing information security personnel. The new security measures implemented include, but are not limited to, the following:

• Added automated software monitoring and configuration management to help defend against new attacks
• Enhanced levels of data protection and encryption
• Enhanced ability to detect software intrusions within the network, unauthorized access and unusual activity patterns
• Implementation of additional firewalls

The company also expedited an already planned move of the system to a new data center in a different location that has been under construction and development for several months. In addition, PS3 will have a forced system software update that will require all registered PlayStation Network users to change their account passwords before being able to sign into the service. As an added layer of security, that password can only be changed on the same PS3 in which that account was activated, or through validated email confirmation, a critical step to help further protect customer data.

The company is conducting a thorough and on-going investigation and working with law enforcement to track down and prosecute those responsible for the illegal intrusion.

“This criminal act against our network had a significant impact not only on our consumers, but our entire industry. These illegal attacks obviously highlight the widespread problem with cyber-security. We take the security of our consumers’ information very seriously and are committed to helping our consumers protect their personal data. In addition, the organization has worked around the clock to bring these services back online, and are doing so only after we had verified increased levels of security across our networks,” said Kazuo Hirai, Executive Deputy President, Sony Corporation. “Our global audience of PlayStation Network and Qriocity consumers was disrupted. We have learned lessons along the way about the valued relationship with our consumers, and to that end, we will be launching a customer appreciation program for registered consumers as a way of expressing our gratitude for their loyalty during this network downtime, as we work even harder to restore and regain their trust in us and our services.”

Complimentary Offering and “Welcome Back” Appreciation Program

While there is no evidence at this time that credit card data was taken, the company is committed to helping its customers protect their personal data and will provide a complimentary offering to assist users in enrolling in identity theft protection services and/or similar programs. The implementation will be at a local level and further details will be made available shortly in each region.

The company will also rollout the PlayStation Network and Qriocity “Welcome Back” program, to be offered worldwide, which will be tailored to specific markets to provide our consumers with a selection of service options and premium content as an expression of the company’s appreciation for their patience, support and continued loyalty.

• Each territory will be offering selected PlayStation entertainment content for free download. Specific details of this content will be announced in each region soon.
• All existing PlayStation Network customers will be provided with 30 days free membership in the PlayStation Plus premium service. Current members of PlayStation Plus will receive 30 days free service.
• Music Unlimited powered by Qriocity subscribers (in countries where the service is available) will receive 30 days free service.

Additional “Welcome Back” entertainment and service offerings will be rolled out over the coming weeks as the company returns the PlayStation Network and Qriocity services to the quality standard users have grown to enjoy and strive to exceed those exceptions.

SNEI will continue to reinforce and verify security for transactions before resuming the PlayStation®Store and other Qriocity operations, scheduled for this month.

For more information about the PlayStation Network and Qriocity services intrusion and restoration, please visit http://blog.us.playstation.com or http://blog.eu.playstation.com/

About Sony Corporation

Sony Corporation is a leading manufacturer of audio, video, game, communications, key device and information technology products for the consumer and professional markets. With its music, pictures, computer entertainment and on-line businesses, Sony is uniquely positioned to be the leading electronics and entertainment company in the world. Sony recorded consolidated annual sales of approximately $78 billion for the fiscal year ended March 31, 2010. Sony Global Web Site: http://www.sony.net/

About Sony Computer Entertainment Inc.

Recognized as the global leader and company responsible for the progression of consumer-based computer entertainment, Sony Computer Entertainment Inc. (SCEI) manufactures, distributes and markets the PlayStation® game console, the PlayStation®2 computer entertainment system, the PSP® (PlayStation®Portable) handheld entertainment system and the PlayStation®3 (PS3®) system. PlayStation has revolutionized home entertainment by introducing advanced 3D graphic processing, and PlayStation 2 further enhances the PlayStation legacy as the core of home networked entertainment. PSP is a handheld entertainment system that allows users to enjoy 3D games, with high-quality full-motion video, and high-fidelity stereo audio. PS3 is an advanced computer system, incorporating the state-of-the-art Cell processor with super computer like power. SCEI, along with its subsidiary divisions Sony Computer Entertainment America Inc., Sony Computer Entertainment Europe Ltd., and Sony Computer Entertainment Korea Inc. develops, publishes, markets and distributes software, and manages the third party licensing programs for these platforms in the respective markets worldwide. Headquartered in Tokyo, Japan, SCEI is an independent business unit of the Sony Group.

[YorkshirePud]

i wish they would make their fucking minds up was the data stolen or not? of course it was just fucking say so

as for freebies? you can bet that EU get something shitty like a free wallpaper while the US gets something like a free game

ill have Wipeout HD please