Follow G4 on Twitter
X

TheFeed

Sony Online Entertainment Confirms Attack -- Nearly 13,000 Credit Card Numbers May Have Been Obtained

Nikole
77 Comments

Posted May 2, 2011 - By Nikole Zivalich

SOE

Sony Online Entertainment has confirmed they have been attacked and that hackers may have obtained personal information from 24.6 million customers. Stolen information includes names, addresses, email, gender, birth-date, phone number and login information. Your password information was not encrypted but was "hashed". SOE then warned residents living outside the US they have further evidence that information from an outdated database may have been accessed. The database contained 12,700 credit/debit card numbers and expiration dates.

NEWSSOE Temporarily Shuts Down Due To Intrusion

The approximately 12,700 non-US credit cards were stored in an outdated database. Like the previous attack on the PSN, security codes were not recorded so they couldn't be accessed by the "intrusion." On top of that, 10,700 direct debit records with bank account numbers from customer in Austria, Netherlands, Germany and Spain may have also been accessed. SOE will notify each of those customers "promptly".

SOE assures gamers their credit card information should be safe, "There is no evidence that our main credit card database was compromised. It is in a completely separate and secured environment."

Sony Online Entertainment also addressed their previous statements denying SEO was affected by an external intrusion. "We had previously believed that SOE customer data had not been obtained in the cyber-attacks on the company, but on May 1st we concluded that SOE account information may have been stolen and we are notifying you as soon as possible."

Sony concluded by apologizing to its customers and confirming the following consequences:

  1. Temporarily turned off all SOE game services;
  2. Engaged an outside, recognized security firm to conduct a full and complete investigation into what happened; and
  3. Quickly taken steps to enhance security and strengthen our network infrastructure to provide you with greater protection of your personal information.

For more information you can read their entire statement here.

Tips, suggestions? Find me on Twitter.

Sony Online Entertainment Confirms Attack -- Nearly 13,000 Credit Card Numbers May Have Been Obtained
http://www.g4tv.com/thefeed/blog/post/712321/sony-online-entertainment-confirms-attack-nearly-13000-credit-card-numbers-may-have-been-obtained/
http://files.g4tv.com/ImageDb3/265684_S/soe.jpg
BlogThread_712321
  • Spiritbrook

    Don't forget the online games like EQII, EQ, Vanguard, etc. They are all shut down too. The only information I can find is to read what they say is happening to PS2 and then extrapolate that EQII and the others will happen about 30 days later - but I don't know, they don't mention us by name. EQII has been faltering for some time, closing worlds and forcing mergers. Don't even speak about PvP... This will drive at least one more nail in the coffin, sell the games back to the original developers who care enough to support them.

    I wish they would go the way of WoW and actually put some POSITIVE advertising into their MMORPGs rather than have people read about security breaches. Also with EQII, allow full cross server transfers no matter what the mode - including PvP. The "equipment disparity" that they say is between PvP and the other servers is quickly becoming irrelevant. They could use some other things from WoW, like security.

    Posted: May 11, 2011 8:18 AM | Reply | Report
  • TrustFall

    Sony is a Japanese company. Coming from someone that works for a Japanese company, and deals with Japanese run companies on a daily basis, they are INCREDIBLY slow to admit fault in anything until it is beyond too late. The reactor meltdown is a perfect example. There was a political cartoon that depicted Superman standing by the reactor asking if they needed help. The response? No, we got this. They are very proud, very stubborn, and they do not fall on their sword unless there is no other choice. And this attitude runs so counter to American expectations that it is causing a PR nightmare for them.

    Posted: May 3, 2011 1:41 PM | Reply | Report
    TrustFall
  • NelsonDemifur

    Could we get a clear idea on WHAT EXACTLY HAPPENED NOW? I need to know what to do and right now it looks like the only idea I have is panic

    Posted: May 3, 2011 12:58 PM | Reply | Report
  • noobgeneral

    So i take it that psn will be down even longer now :(

    Posted: May 3, 2011 12:52 PM | Reply | Report
    noobgeneral
  • knight2211

    come on sony lets gets going and fix these problems

    Posted: May 3, 2011 12:33 PM | Reply | Report
    knight2211
  • Mobe81

    Its like the attackers don't believe that when they are finally caught, they won't be royally effed in the a.

    Posted: May 3, 2011 10:53 AM | Reply | Report
  • lowkevmic

    @shmaron- That's very true. But that still doesn't excuse Sony's poor security. GeoHot hacking the PS3 and posting it on Youtube, should have been a indicator that they need to take a second look at their security if some kid can hack their PS3 so easily. Sony was attacked before the whole GeoHot incident, and they still did nothing to imporve their security. So as much as it's true that anyone company can be targeted for an attack, that targeted company shouldn't just wait until they are. Especially when they have so many people personal info and credit card info at stake.

    I can almost be certain, that thanks to the whole ordeal going on with Sony, companies like Microsoft and Nintendo are becomming more dilligent with how to protect themselves against the same attack. Sony was simply caught with their pants down.

    Posted: May 3, 2011 10:40 AM | Reply | Report
    lowkevmic
  • shmaron

    @ everyone blaming Sony or thinking of switching to another console

    No matter what company you give your personal info to, it won't be safe. Even Visa got hacked like six months ago. I remember having to change my card back then. This is a personal vendetta against Sony, and could happen to any company, Microsoft or Nintendo.

    Posted: May 3, 2011 9:06 AM | Reply | Report
    shmaron
  • lowkevmic

    Forget any fanboy talk from either side. This has gotten a little out of hand for Sony. I know a lot of loyalists will stick this out, and remain faithful to Sony...I get it. But let's call a spade a spade. Sony is really blowing it in regards to their customer's personal information. This may not stop those who already own a PS3 from switching, but this will definitely put a damper on any new gamers deciding to sign up for their online service, let alone buy a new PS3.

    Posted: May 3, 2011 8:43 AM | Reply | Report
    lowkevmic
  • Preyer

    The news just gets worse and worse, I bet next they're going to say is "there main credit card database has been accessed."

    Posted: May 3, 2011 8:36 AM | Reply | Report
    Preyer
  • zhoran

    Hello. My friend

    http://www.Lttsy.com

    The new update, a large hot

    FREE sHIPPING

    WE ACCEPT PYAPAL PAYMENT

    YOU MUST NOT MISS IT!!!
    We look forward to your visit
    thank you !!!
    http://www.Lttsy.com

    Posted: May 3, 2011 8:31 AM | Reply | Report
    zhoran
  • dukesnugglez

    Well with Osama Bin Laden gone terrorism will probably go into a recession or the average American will not care anymore. So we as Americans need something to hate in order to unite us. (Backwards concept I know, but bare with me) Hackers, they are the perfect group of people to hate. They are disrespectful of everyone from Corporations to Little Old Grandma Moses, these people will inflict damage to any and all. They are the sole reason why billions are spent each year on internet security and virus protection. Hackers are some sick individuals, why else would any person purposely create something like the Weather Bug Trojan just to destroy a computer and cause a hard working person who spent money earned through blood and sweat to spend hours of their free time plus more money to fix the damage. FOR WHAT?!? Just to gets some jollies or to stick it to the man? If you want to impress me with your plan to stick it to the man then stop being so sloppy and create these programs to go only after corporations not anyone and everyone. WHAT THE HELL IS WRONG WITH THESE PEOPLE. So I purpose that we all band together and go after these bastards. For example if they have a convection, we all go with baseball bats and torches, beat the piss out of them then burn their equipment. If they band together to retaliate against everyone then we make hacking and creating programs intended to harm a computer or to steal information from that computer a crime worth the death penalty then start executing them in public or give them life sentences of having to fix people's computers that were hacked or infected with vicious programs.

    Posted: May 3, 2011 8:07 AM | Reply | Report
  • BobbyDole

    Atopee2002... we get it... lol

    But honestly this has just not been their month, I'm an xbox-er but I'm starting to feel kind of bad.

    Posted: May 3, 2011 6:59 AM | Reply | Report
  • cardinalsfan1122

    Well this shows that Sony is the the main target and not just PSN or PS3. So im not big in the hacker world and don't know if anyone else has it out for sony but anonymous declared war on them so my best suspicion is them.

    Posted: May 3, 2011 6:34 AM | Reply | Report
    cardinalsfan1122
  • BX

    buying a xbox today

    Posted: May 3, 2011 5:37 AM | Reply | Report
  • BX

    buying a xbox today XD

    Posted: May 3, 2011 5:34 AM | Reply | Report
  • Cryptomaster420

    the hacker or hackers that stole em will be getting a life sentence aka 12 counts of credit card fraud is about 15 years in prison with parole so multiply that by a thousand yup this guys screwed

    Posted: May 3, 2011 2:51 AM | Reply | Report
  • GeneralKumar

    Two rules in this world: Don't Mess with the people that make your food, and don't bully the people that are better at hacking than you are at protecting....

    Posted: May 3, 2011 12:48 AM | Reply | Report
    GeneralKumar
  • darylcorey

    This probably had nothing really to do with Anon or 4chan, different attack type. Nah thsi was someone out for cash hoping that earlier stuff would buy him some time.

    Posted: May 2, 2011 11:25 PM | Reply | Report
  • Trityler

    If we can find Osama, we should be able to find these dick hackers.

    Posted: May 2, 2011 11:20 PM | Reply | Report
    Trityler

Add a Comment

Limit 5,000 characters | 5,000 characters remaining
Log in to Comment
Post to Facebook
Post to Facebook

ADVERTISEMENT

Blog Tags

g4tv.com

AdChoices