Sony's PSN Attacked Again! 93,000 Accounts Compromised!

[Kevin]

Apparently the FBI is on this as well...

http://apps.facebook...s&news_id=78346

Shit got real if the FBI is in on it! It wouldn't surprise me if the Department of Justice were to get involved too. One Senator is already calling on it.

[goku262002]

So isn't the network supposed to be on tommorow sometime? or at midnight? (which is like 3 hours from now)

Edited April 29, 2011 by goku262002

[LunarEdge]

Q&A on the official Playstation Blog:

http://blog.us.playstation.com/2011/04/28/qa-2-for-playstation-network-and-qriocity-services/

Q: Will our download history/friends list/settings be affected by the PSN downtime?

A: No, they will not.

Q: Will trophies that were earned in single-player offline games during the outage be intact when the service resumes?

A: These trophies are intact and will be re-synched when the network is once again operational.

Q: Will my PS+ cloud saves be retrievable?

A: Yes, once PSN is restored.

Q: What if we have a subscription to PS3 MMOs DC Universe Online or Free Realms? Will we get compensation for that?

A: From Sony Online Entertainment: “We apologize for any inconvenience players may have experienced as a result of the recent service interruption. As a global leader in online gaming, SOE is committed to delivering stable and entertaining games for players of all ages. To thank players for their patience, we will be hosting special events across our game portfolio. We are also working on a “make good” plan for players of the PS3 versions of DC Universe Online and Free Realms. Details will be available soon on the individual game websites and forums.”

Q: Will there be a goodwill gesture for the time we haven’t been able to utilize PSN/Qriocity?

A: We are currently evaluating ways to show appreciation for your extraordinary patience as we work to get these services back online.

[Badnik Mechanic]

Owww we're getting free toot..

So long as we can actually access our accounts once the service comes back up.

[LunarEdge]

So isn't the network supposed to be on tommorow sometime? or at midnight? (which is like 3 hours from now)

Never heard of it going back up any time soon. Any sources as to why you believe that to be so?

Here's part 1 to that Q&A I posted earlier...

Q: Are you working with law enforcement on this matter?

A: Yes, we are currently working with law enforcement on this matter as well as a recognized technology security firm to conduct a complete investigation. This malicious attack against our system and against our customers is a criminal act and we are proceeding aggressively to find those responsible.

Q: Was my personal data encrypted?

A: All of the data was protected, and access was restricted both physically and through the perimeter and security of the network. The entire credit card table was encrypted and we have no evidence that credit card data was taken. The personal data table, which is a separate data set, was not encrypted, but was, of course, behind a very sophisticated security system that was breached in a malicious attack.

Q: Was my credit card data taken?

A: While all credit card information stored in our systems is encrypted and there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. If you have provided your credit card data through PlayStation Network or Qriocity, out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained. Keep in mind, however that your credit card security code (sometimes called a CVC or CSC number) has not been obtained because we never requested it from anyone who has joined the PlayStation Network or Qriocity, and is therefore not stored anywhere in our system.

Q: What steps should I take at this point to help protect my personal data?

A: For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking. When the PlayStation Network and Qriocity services are fully restored, we strongly recommend that you log on and change your password. Additionally, if you use your PlayStation Network or Qriocity user name or password for other unrelated services or accounts, we strongly recommend that you change them, as well. To protect against possible identity theft or other financial loss, we encourage you to remain vigilant, to review your account statements and to monitor your credit reports.

Q: What if I don’t know which credit card I’ve got attached to my PlayStation Network account?

A: If you’ve added funds to your PlayStation Network wallet in the past, you should have received a confirmation email from “DoNotReply@ac.playstation.net” at the email address associated with your account. This email would have been sent to you immediately after you added the funds, and will contain the first 4 digits and last 4 digits of your credit card number. You can also check your previous credit card statements to determine which card was attached to your PlayStation Network or Qriocity accounts.

Q: When or how can I change my PlayStation Network password?

A: We are working on a new system software update that will require all users to change their password once PlayStation Network is restored. We will provide more details about the new update shortly.

Q: Have all PlayStation Network and Qriocity users been notified of the situation?

A: In addition to alerting the media and posting information about it on this blog, we have also been sending emails directly to all 77 million registered accounts. It takes a bit of time to send that many emails, and recognize that not every email will still be active, but this process has been underway since yesterday. At this time, the majority of emails have been sent and we anticipate that all registered accounts will have received notifications by April 28th. Consumers may also visit www.us.playstation.com/support and www.qriocity.com for notices regarding this issue. In addition, we have taken steps to disseminate information regarding this issue to media outlets so that consumers are informed.

Q: What steps is Sony taking to protect my personal data in the future?

A: We’ve taken several immediate steps to add protections for your personal data. First, we temporarily turned off PlayStation Network and Qriocity services and, second, we are enhancing security and strengthening our network infrastructure. Moving forward, we are initiating several measures that will significantly enhance all aspects of PlayStation Network’s security and your personal data, including moving our network infrastructure and data center to a new, more secure location, which is already underway. We will provide additional information on these measures shortly.

Q: Has Sony identified the party or parties responsible for the PlayStation Network hack and subsequent theft of personal information?

A: We are currently conducting a thorough investigation of the situation and are working closely with a recognized technology security firm and law enforcement in order to find those responsible for this criminal act no matter where in the world they might be located.

Q: When will the PlayStation Network and Qriocity be back online?

A: Our employees have been working day and night to restore operations as quickly as possible, and we expect to have some services up and running within a week from yesterday. However, we want to be very clear that we will only restore operations when we are confident that the network is secure.

Edited April 29, 2011 by LunarEdge

[goku262002]

From what i heard the network was supposed to be on at the latest was friday. did something change?

[LunarEdge]

From what i heard the network was supposed to be on at the latest was friday. did something change?

Where did you hear this?

[goku262002]

Where did you hear this?

Local news mainly. but i thought i remember reading an article on kotaku.

[LunarEdge]

If it's back up by later today, that'd be great. As optimistic a person I am, I can't help but be realistic about this and say this probably won't be resolved any time soon.

[Eternal EX]

[Flint]

I doubt it's going to take very long for it to get activated again. The damage has been done and they've been sorting out for a good week now, not to mention they're in a PR hell which'll make them even more eager to get it up sooner than later. They're also giving an estimation in that Q&A - if there wasn't any realistic hope for the restoration to make that estimation, I doubt they'd be giving us any date considering the PR mess they're already in.

[LunarEdge]

I doubt it's going to take very long for it to get activated again. The damage has been done and they've been sorting out for a good week now, not to mention they're in a PR hell which'll make them even more eager to get it up sooner than later. They're also giving an estimation in that Q&A - if there wasn't any realistic hope for the restoration to make that estimation, I doubt they'd be giving us any date considering the PR mess they're already in.

I would bet for some time next week, but only time will tell.

[Jetronic]

Oh dear.....

[Carbo]

That... is pretty horrifying to imagine.

I hope to god that isn't even remotely true.

[SHAX Hedgefox]

Wow. Makes me glad I don't have a PSN account.

If anyone needs me, I'll be off playing Portal 2. On my un-hacked 360

Edited April 29, 2011 by SHAX Hedgefox

[Badnik Mechanic]

if anyone needs me, I'll be off playing Portal 2. On my un-hacked 360

Have fun, just don't play Call of Duty online as you probably won't have your account afterwards... oh you mean you didn't know that Microsoft issued an alert about online play the other day? Only because everyone is still under the belief that this will never happen to the 360 or the Wii nobody right now is taking a bit of notice.

[Dobkeratops]

If anyone needs me, I'll be off playing Portal 2. On my un-hacked 360

Yeah, do us a favor and go enjoy your terrible port instead of contributing to this thread in such a manner.

Oh dear.....

"xxx: format is: fname, lnams, address, zipcode, country, phone, email, email password, dob, ccnum, cvv2, exp date,"

So how did they get a number that is NOT on the servers? Visa/Mastercard forbid the storing of that particular data.

Reeks of fake until proven otherwise.

[Detective Shadzter]

From what i heard the network was supposed to be on at the latest was friday. did something change?

Sony never said it would be back up by Friday. All they're saying right now is that they're hoping to have 'some' services back online by May 3rd, but they're not putting anything online until it's secure.

http://www.eurogamer.net/articles/2011-04-28-sony-expects-psn-will-be-back-by-3rd-may

[Scar]

That's some hacking.

They managed to hack information that doesn't even exist. Which is probably why Sony didn't buy the information back....because its fake.

If anyone needs me, I'll be off playing Portal 2. On my un-hacked 360

Real mature.

Just because the PS3 has been hacked, doesn't mean the XBLive is immune to it.

[turbojet]

Oh dear.....

MSNBC has let me down once again. This is like the second time ever.

[Detective Shadzter]

Just been linked to this by JayZeach and I lol'd, so I thought you guys might like to see it. It's a report from 3 days ago on the PSN shutdown by Channel 4 News, but it has a lot of Sonic 4: Episode 1 in it. The end is just crazy.

[Badnik Mechanic]

What the hell!? lol SONIC 4 HACKED THE PSN!!!

*watches the full video*

What the bloody hell!? What did I just see!? I should watch Channel 4 news more often, it blends reality with videogames!

Edit: Channel 4 implied that the platstation network was responsible for Sonic 4's creation didn't it?

Edited April 29, 2011 by Hogfather

[Carbo]

http://www.destructoid.com/sony-didn-t-need-your-cc-security-code-except-it-did--199973.phtml

This week, Sony communications chief Patrick Seybold tried to put fears to rest with another PlayStation Network/Qriocity FAQ. He attempted to dissuade users from feeling that their credit card information is at risk by stating that hackers couldn't possibly have all the information. Why not? Sony never asked for it, apparently.

"Keep in mind, however that your credit card security code (sometimes called a CVC or CSC number) has not been obtained," he stated, "because we never requested it from anyone who has joined the PlayStation Network or Qriocity, and is therefore not stored anywhere in our system."

Good news, right? Well ... perhaps not. We looked into the veracity of that claim and found evidence -- on PlayStation.com, no less -- that Sony did request your credit card security code when you signed up to PlayStation Network. There's even a screenshot of the billing page, viewable above, that shows it.

Sony seems adamant that your security card information isn't at risk, so it's quite possible that, even if asked for, it was never stored, as per VISA's rules. Even so, why tell us it was never asked for when it looks like it was?

We've contacted Sony for comment as we try and find out how this discrepancy occurred. For obvious reasons we cannot see what the PlayStation Network billing page currently looks like on our PS3s, but it's a strange situation nonetheless. Hopefully Sony has a good explanation for what looks like a disconcerting contradiction.

That's odd? I don't recall ever having to give that info.

Edited April 29, 2011 by Carbo

[Detective Shadzter]

What the hell!? lol SONIC 4 HACKED THE PSN!!!

*watches the full video*

What the bloody hell!? What did I just see!? I should watch Channel 4 news more often, it blends reality with videogames!

Edit: Channel 4 implied that the platstation network was responsible for Sonic 4's creation didn't it?

The guy says "breathing new life into long forgotten characters like Sonic the Hedgehog". So, he seems to think it's something that it's resurrected him, even though he never went away and has and still does have games released on a variety of platforms. I'm guessing this guy hasn't seen a new Sonic game since Sonic 3 and when he saw Sonic 4: Episode 1 up for download on PSN, he thought that this was the first game since then Unless he's just referring to Sonic 4: Ep 1 as a reboot and doesn't know it's on other platforms, too.

[LunarEdge]

Long forgotten characters like Sonic the Hedgehog? I didn't know he was forgotten.