site Search:


 
   
story category
Sony Warns of New Hack Attempt
Doesn't Sit on Information This Time
by Karl Bode Wednesday 12-Oct-2011 tags: business · security · trouble · consumers
Tipped by cabana See Profile
Sony took significant heat earlier this year for failing to quickly inform users that their PlayStation Network had suffered a major hack. Late yesterday Sony didn't make the same mistake, company SVP & Chief Information Security Officer Philip Reitinger posting a statement to the company blog informing users that the company has detected attempts on Sony Entertainment Network, PlayStation Network and Sony Online Entertainment services to test a massive set of sign-in IDs and passwords against Sony's network database. Says Reitinger:

Less than one tenth of one percent (0.1%) of our PSN, SEN and SOE audience may have been affected. There were approximately 93,000 accounts globally (PSN/SEN: approximately 60,000 accounts; SOE: approximately 33,000) where the attempts succeeded in verifying those accounts’ valid sign-in IDs and passwords, and we have temporarily locked these accounts. Only a small fraction of these 93,000 accounts showed additional activity prior to being locked. We are currently reviewing those accounts for unauthorized access, and will provide more updates as we have them. Please note, if you have a credit card associated with your account, your credit card number is not at risk.


view: topics flat text 
Post a:

Anon1234

@spcsdns.net

Hmmm

The hackers are still at this, trying to prove a point. I thought by now the script kiddies have had their fun.

Romney2012
Defeat Obama 2012-Chg we can believe in
Premium
join:2002-03-03
USA
kudos:4

Re: Hmmm

said by Anon1234 :

The hackers are still at this, trying to prove a point. I thought by now the script kiddies have had their fun.

Yes, sounds like someone brute forcing easily guessed passwords to break in to accounts. This could be done against any web site on the internet.
--
»www.rickperry.org/

Matt
All noise, no signal.
Premium
join:2003-07-20
Jamestown, NC
kudos:12

Re: Hmmm

said by Romney2012:

said by Anon1234 :

The hackers are still at this, trying to prove a point. I thought by now the script kiddies have had their fun.

Yes, sounds like someone brute forcing easily guessed passwords to break in to accounts. This could be done against any web site on the internet.

Not brute force, just trying random email addresses and password combinations from other hacked sites. How many people do you know who use a different password for each site login? I don't know very many who do.

said by Sony :
We want to let you know that we have detected attempts on Sony Entertainment Network, PlayStation Network and Sony Online Entertainment (“Networks”) services to test a massive set of sign-in IDs and passwords against our network database. These attempts appear to include a large amount of data obtained from one or more compromised lists from other companies, sites or other sources. In this case, given that the data tested against our network consisted of sign-in ID-password pairs, and that the overwhelming majority of the pairs resulted in failed matching attempts, it is likely the data came from another source and not from our Networks. We have taken steps to mitigate the activity.

Romney2012
Defeat Obama 2012-Chg we can believe in
Premium
join:2002-03-03
USA
kudos:4

Re: Hmmm

said by Matt:

How many people do you know who use a different password for each site login? I don't know very many who do.

Me either. I use different passwords on all sites and even different userid's on all my financial and web commerce sites like amazon. But like you say, very few do that.
--
»www.rickperry.org/

FBGuy
yippee ki yay
Premium
join:2005-03-19

lol

Looks like Gawker is still in charge of security over at Sony.

PToN

join:2001-10-04
Houston, TX

Re: lol


Simba7
I Void Warranties

join:2003-03-24
Billings, MT

Kudos for Sony..

At least you're not denying or misinforming that you were being hacked like earlier this year. You're actually informing the customers of up-to-date network attacks which is impressive.

Still not impressed by the locked-down console, though. If they'd return Linux access, then I'd be curious.

..and this coming from an XBL user..
--
Bresnan 30M/5M
MyWS[i7-870@4.1G,16G RAM,2x1T HDDs,Win7]
WifeWS[A64@2G,2G RAM,120G HDD,Win7]
Router[2xP3@1G,512M RAM,18G HDD,Allied Telesyn AT2560FX,2xDigital QP DE504,Compaq DP NC3131,2xSun QP GigaSwift, SMC 8432BTA, FreeBSD]
firedrakes

join:2009-01-29
Arcadia, FL

Re: Kudos for Sony..

true simba. was surprise about them letting the use know

DataRiker
Premium
join:2002-05-19
00000
Reviews:
·RoadRunner Cable
Why are we giving kudos for a company telling the truth. Shouldn't they just be expected to do this?

Honestly, at this point I have much more faith in the credibility of hacker groups which post updates on IRC than I do in Sony who has proved for over a decade that it cares zero about it customers.

Thaler
Premium
join:2004-02-02
Los Angeles, CA
kudos:3
Reviews:
·DSL EXTREME

Re: Kudos for Sony..

said by DataRiker:

Why are we giving kudos for a company telling the truth. Shouldn't they just be expected to do this?

Yeah, but they don't.

It's like giving kudos to a bank that isn't actively ripping money out from your wallet. Sure, they should all be providing value to the customer...but again, not a lot of them do.

Monday, 04-Jun 22:46:29 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.