Late yesterday, Sony revealed some details on the difference in timing between the company learning that the PlayStation Network had been compromised and it informing consumers. A post on Sony's blog from Sr. Director, Corporate Communications & Social Media Patrick Seybold reads: "There’s a difference in timing between when we identified there was an intrusion and when we learned of consumers’ data being compromised."
According to the post, Sony learned there was an intrusion on April 19th, then shut the services down. Sony said, "We then brought in outside experts to help us learn how the intrusion occurred and to conduct an investigation to determine the nature and scope of the incident" because "it was necessary to conduct several days of forensic analysis, and it took our experts until yesterday to understand the scope of the breach."
So what do you think? Should Sony have revealed this information sooner, or did the company follow proper, sensible protocol?
