Sony Says It Didn't Know Severity Of PS3 Breach Until Monday

Illustration for article titled Sony Says It Didnt Know Severity Of PS3 Breach Until Monday

While Sony discovered that hackers had broken into their Playstation Network on April 19, it wasn't until nearly a week later that the company understood the full scope of the breach, a Sony official tells Kotaku.

The company learned that customer data was stolen on Monday, only after an outside security firm conducted days of forensic analysis, Sony said.

U.S. Senator Richard Blumenthal publicly questioned today Sony's failure to "immediately notify affected customers of the breach and to extend adequate financial data security protections."


The letter, written to Sony Computer Entertainment of America president Jack Tretton, echoes the concerns of Playstation Network members who have been increasingly bothered by the lack of information from Sony.

Speaking to Kotaku tonight, SCEA spokesman Patrick Seybold explained the apparent delay in notifying customers.

"There's a difference in timing between when we identified there was an intrusion and when we learned of consumers' data being compromised," Seybold said. "We learned there was an intrusion April 19th and subsequently shut the services down.


"We then brought in outside experts to help us learn how the intrusion occurred and to conduct an investigation to determine the nature and scope of the incident. It was necessary to conduct several days of forensic analysis, and it took our experts until yesterday to understand the scope of the breach. We then shared that information with our consumers and announced it publicly this afternoon."

About 4 p.m. Eastern Tuesday, Sony started notifying their Playstation Network members that private data including names, addresses and perhaps passwords were stolen from Sony's database. The company doesn't believe credit card data was stolen, but isn't positive it is secure.


See Also

Sony Comes Clean: PlayStation Network Hackers Have Stolen Personal Data

A security breach in the Playstation Network by still unidentified hackers resulted in stolen personal information, Sony confirmed today.
Sony says while personal information was likely stolen they don't believe credit card numbers were and that they hope to have the Playstation Network service... More »



Despite Reports, No Arrest Yet in Playstation Network Outage

No arrests have been made connected to the Playstation outage, Kotaku has confirmed, despite a story making the rounds that claims FBI and others have issues warrants and made arrests.
Speaking to the FBI this morning, Kotaku confirmed there have been no arrests in the U.S.
The story, which seemed... More »


U.S. Senator Demands Answers From Sony Over PlayStation Network Data Breach

United States senator Richard Blumenthal is hopping mad-or in his words, "troubled"-by the lack of clear and timely communication from Sony over last week's PlayStation Network "intrusion." And he's got the sternly worded letter to prove it.
The attack on Sony's PlayStation Network and... More »



Everything You Need To Know About The PlayStation Network Outage

It has been almost a week since Playstation Network went offline because of an external intrusion.
Since Sony's still relatively quiet on the details of what happened and how it will impact us. More »



PlayStation Network Shoplifting May Have Taken PS3 Offline & Other Less Believable Theories

Why is the PlayStation Network still offline? Sony Computer Entertainment America will only cop to an unnervingly vague "external intrusion on our system," leading those affected by and those taking delight in PSN's problems to generate their own theories about the disruption that's now six days... More »



Sony Doesn't Know Yet If Your Credit Card Number Was Stolen

Sony has not yet determined if the personal information or credit card numbers of users on the still-offline Playstation Network have been stolen, according to a Sony spokesman.
Sony Computer Entertainment is conducting "thorough investigation" into the outage, Satoshi Fukuoka, a spokesman for Sony... More »


Share This Story

Get our newsletter



All the Sony hate is ridiculous. Stop jumping on the bandwagon, hate-filled fools.

Consider this. Were the people in the Twin Towers incompetent because they got attacked and the buildings fell down? No. The criminals were the hijackers in the plane. They were to blame. The attackers.

Similarly, Sony aren't incompetent because they got attacked and wounded. You think they have some malicious plan to piss people off? Don't you think they'd have consulted banks of lawyers, security experts and all kinds of boffins to see how to approach this? How to check what has happened and at what point to release info? They're not sitting around chuckling at the chaos. They want it fixed more than anyone, y'know.

Incompetence would have been if they'd kept PSN on, said nothing, and carried on as normal. I'd like to think they've done what they could. Sure, I'm pissed off a little that I can't play online for a bit, but LIFE GOES ON.

And before I get called out for comparing this to 9/11... I'm not saying they are on the same scale. I'm just saying, save your vitriol for the attackers, not the attacked. Besides which, there seem to be plenty of people for whom this is a cataclysmic event. I hope they can sort their heads out because as I said... LIFE GOES ON.