Sony breach impacts 93000 users

Date: 2011-10-12 09:55:42

Sometime between October 7 and October 10, The Sony Playstation Network detected a high volume of unauthorized logins. Sony locked about 93,000 accounts whose IDs and passwords were successfully breached.

Sony sent email notifications and password reset procedures to breached account holders. Sony reports that no credit card data was taken

If you have been notified by Sony, or hold a playstation network account, change your password and any other site passwords sharing the same user/password. Always start by changing with your email. Email is always the first target after any breach.

Update 2011-10-12 16:30 GMT

According to recent reports, the usernames and passwords used against the Sony network were not obtained from Sony, but from another source.

In an April breach, Sony was criticized for taking weeks to notify users. In this case, Sony may have notified users with too little information. Sony appears to be a target and not a source. Playstation users should still take precautions and change passwords. Hopefully Sony will provide the email addresses to security experts, who can bounce the attempted logins against known breach lists to determine the source.

References

Playstation blog entry

Category: Breach

Subcategory: Passwords