While Sony discovered that hackers had broken into their Playstation Network on April 19, it wasn't until nearly a week later that the company understood the full scope of the breach, a Sony official tells Kotaku.
The company learned that customer data was stolen on Monday, only after an outside security firm conducted days of forensic analysis, Sony said.
U.S. Senator Richard Blumenthal publicly questioned today Sony's failure to "immediately notify affected customers of the breach and to extend adequate financial data security protections."
The letter, written to Sony Computer Entertainment of America president Jack Tretton, echoes the concerns of Playstation Network members who have been increasingly bothered by the lack of information from Sony.
Speaking to Kotaku tonight, SCEA spokesman Patrick Seybold explained the apparent delay in notifying customers.
"There's a difference in timing between when we identified there was an intrusion and when we learned of consumers' data being compromised," Seybold said. "We learned there was an intrusion April 19th and subsequently shut the services down.
"We then brought in outside experts to help us learn how the intrusion occurred and to conduct an investigation to determine the nature and scope of the incident. It was necessary to conduct several days of forensic analysis, and it took our experts until yesterday to understand the scope of the breach. We then shared that information with our consumers and announced it publicly this afternoon."
About 4 p.m. Eastern Tuesday, Sony started notifying their Playstation Network members that private data including names, addresses and perhaps passwords were stolen from Sony's database. The company doesn't believe credit card data was stolen, but isn't positive it is secure.
See Also
Sony Comes Clean: PlayStation Network Hackers Have Stolen Personal Data
A security breach in the Playstation Network by still unidentified hackers resulted in stolen personal information, Sony confirmed today.
Sony says while personal information was likely stolen they don't believe credit card numbers were and that they hope to have the Playstation Network service... More »
Despite Reports, No Arrest Yet in Playstation Network Outage
No arrests have been made connected to the Playstation outage, Kotaku has confirmed, despite a story making the rounds that claims FBI and others have issues warrants and made arrests.
Speaking to the FBI this morning, Kotaku confirmed there have been no arrests in the U.S.
The story, which seemed... More »
U.S. Senator Demands Answers From Sony Over PlayStation Network Data Breach
United States senator Richard Blumenthal is hopping mad-or in his words, "troubled"-by the lack of clear and timely communication from Sony over last week's PlayStation Network "intrusion." And he's got the sternly worded letter to prove it.
The attack on Sony's PlayStation Network and... More »
Everything You Need To Know About The PlayStation Network Outage
It has been almost a week since Playstation Network went offline because of an external intrusion.
Since Sony's still relatively quiet on the details of what happened and how it will impact us. More »
PlayStation Network Shoplifting May Have Taken PS3 Offline & Other Less Believable Theories
Why is the PlayStation Network still offline? Sony Computer Entertainment America will only cop to an unnervingly vague "external intrusion on our system," leading those affected by and those taking delight in PSN's problems to generate their own theories about the disruption that's now six days... More »
Sony Doesn't Know Yet If Your Credit Card Number Was Stolen
Sony has not yet determined if the personal information or credit card numbers of users on the still-offline Playstation Network have been stolen, according to a Sony spokesman.
Sony Computer Entertainment is conducting "thorough investigation" into the outage, Satoshi Fukuoka, a spokesman for Sony... More »