Sony confirms Sony Pictures breach, says 37,500 users affected [updated]

By on June 8, 2011 at 1:15 PM.

Sony confirms Sony Pictures breach, says 37,500 users affected [updated]

Sony has released more information regarding a recent breach suffered by one of the many Sony properties that have been targeted by hackers over the past few months. The company said on Wednesday that personal information belonging to 37,500 users has been compromised as a result of a cyberattack on the Sony Pictures website last week. Hackers from a small group known as Lulz Security claimed to have accessed over one million accounts during their breach of the Sony Pictures site, but they were only able to download a small sample of those records due to their limited resources. Sony states that no credit card numbers were stored on the website’s servers, but information including names, genders, addresses, email addresses, phone numbers, birth dates, user account names and passwords was taken during the breach.

UPDATE: Sony Pictures’ letter to customers affected by the breach can now be seen after the break. More →

13 Comments

Sony suffers yet another breach; Sony Music Brazil site hacked

By on June 6, 2011 at 9:31 AM.

Sony suffers yet another breach; Sony Music Brazil site hacked

The list of hacked Sony properties continues to grow as Sony Music Brazil finds its website the latest victim in a long line of breaches. The company’s website was the target of a cyberattack on Saturday night and nearly 36 hours later, the site is still offline. Initially, the hackers defaced the site with a single page titled “Hacked The UnderTaker,” which apparently contained nicknames of several people responsible for the attack. More than 12 hours later, the website was finally taken offline. Sony Music Brazil has not commented on the breach and it is unclear if any private data was exposed. More →

16 Comments

Sony Pictures breach confirmed to be authentic; Sony launches investigation

By on June 3, 2011 at 9:15 AM.

Sony Pictures breach confirmed to be authentic; Sony launches investigation

A small group of hackers calling themselves LulzSec on Thursday claimed to have breached a Sony website and gained access to personal information belonging to over 1 million Sony customers. The group posted a statement claiming it did not have the resources to download the massive database tied to SonyPictures.com, but it provided samples of the data accessed in order to prove the breach was real. The Associated Press contacted several of the purported victims using phone numbers posted by LulzSec, and it was able to confirm with multiple victims that the data, which included account passwords, was authentic and accurate. Sony has not yet confirmed the breach, though a company spokesperson did say Sony is currently investigating the claims. This new breach is the latest in a string of hacks on various Sony networks that have compromised personal data belonging to over 100 million Sony customers. More →

24 Comments

Sony Pictures website hacked, 1 million accounts compromised

By on June 2, 2011 at 6:30 PM.

Sony Pictures website hacked, 1 million accounts compromised

Hackers from a group called LulzSec announced on Thursday that they had breached sonypictures.com, the website belonging to Sony-owned studio Sony Pictures. The group claims to have compromised personal information belonging to over 1 million users, including user names, passwords, home addresses, dates of birth and other sensitive data. The group also claims to have accessed 75,000 “music codes” and 3.5 million “music coupons.” LulzSec says it employed a simple SQL injection technique to access the data, and that Sony Pictures’ site was not secure and was therefore easy to breach. The hackers did not have the resources to download all of the exposed data, but they say they did obtain samples in order to prove the authenticity of the attack. LulzSec’s statement on the breach is after the break. More →

23 Comments

Sony PlayStation Network to be fully restored by this weekend in most regions

By on May 31, 2011 at 10:03 AM.

Sony PlayStation Network to be fully restored by this weekend in most regions

Sony on Tuesday stated that services associated with its PlayStation Network will be fully restored by the end of this week in all regions outside Japan, Hong Kong, and South Korea. Sony also said it would fully restore the Music Unlimited services tied to its Qriocity streaming music offering for the PlayStation 3, PSP and PCs. “We have been conducting additional testing and further security verification of our commerce functions in order to bring the PlayStation Network completely back online so that our fans can again enjoy the first class entertainment experience they have come to love,” said Kazuo Hirai, Sony’s Executive Deputy President, in a statement. “We appreciate the patience and support shown during this time.” Sony recently suffered a series of cyberattacks across various networks that exposed personal data belonging to over 100 million of the company’s customers. Sony is currently working with the FBI to identify the parties responsible for breaching its various digital networks. Hit the break for Sony’s full press release. More →

8 Comments

Sony cyberattacks spill over to Sony Ericsson

By on May 25, 2011 at 2:43 PM.

Sony cyberattacks spill over to Sony Ericsson

Sony continues to be targeted in a series of cyberattacks that have resulted in the theft of personal information belonging to over 100 million Sony customers. Following breaches of the company’s PlayStation Network, Sony Online Entertainment, So-net Entertainment and most recently, the Sony’s Greek website, hackers have breached a database associated with Sony Ericsson’s Canadian online shop. Personal data including names, email addresses and passwords belonging to more than 2,000 customers was compromised, but Sony said no credit card numbers were stolen. A Lebanese hacking group called Idahca claimed responsibility for the attack, and it said the information obtained has been leaked on Facebook and Twitter. It is unclear if this latest attack is tied in any way to previous attacks on Sony’s various digital properties. More →

22 Comments

Sony suffers another cyberattack

By on May 24, 2011 at 9:00 AM.

Sony suffers another cyberattack

Sony’s ongoing battle with cyberattacks has already left the personal data of over 100 million customers exposed, and now the company has fallen victim to yet another attack. Details are slim for the time being, but Reuters cites a report from Jiji news service in stating that roughly 8,500 people across three countries have been affected by this latest breach. Their personal information has been leaked as a result of an attack on Sony’s Greek website on Tuesday, though it is unclear exactly what data the hackers gained access to. Sony has not yet confirmed the attacks, but its Greek website, sony.gr, was back online at the time of this writing. More →

26 Comments

Sony security slump continues, subsidiary So-net Entertainment hacked

By on May 20, 2011 at 3:31 PM.

Sony security slump continues, subsidiary So-net Entertainment hacked

The Wall Street Journal is reporting that hackers have accessed the customer accounts of Sony subsidiary So-net Entertainment Corp, an ISP, and have stolen about $1,225 worth of redeemable gift points. The news comes just weeks after Sony’s massive security breach, during which private information and 12.3 million credit card numbers were stolen from more than 100 million Sony’s Qriocity and PlayStation Network users. Sony said the So-net hacker tried to break into its systems more than 10,000 times before he or she was able to successfully log-in. The intruder was able to access 201 accounts, and he or she stole the redeemable points from 128 customers. “Although we can’t completely rule out the possibility that there is a connection with the PSN issue, the likelihood is low,” said So-net Entertainment spokesperson Keisuke Watabe, noting that the style of attack was different. So-net does not believe that personal information was taken during the break-in. More →

16 Comments

Sony’s PlayStation Network password reset page compromised

By on May 18, 2011 at 12:06 PM.

Sony’s PlayStation Network password reset page compromised

According to reports from numerous gaming sites, the password reset page for Sony’s PlayStation Network has been exploited. Sony built the page in an effort to allow users, whose accounts were already compromised during a major security breach last month, to reset their security credentials. However, hackers who stole the information from Sony can reset users’ passwords by knowing and account holder’s email address and birthday — information they’ve already stolen. Forum members on Nyleveia have suggested that PSN users create a new email address specifically for use with PSN. Sony has taken the website offline, and said: “Unfortunately this also means that those who are still trying to change their password via PlayStation.com or Qriocity.com will still be unable to do so for the time being.” Sounds like Sony really needs to get those new security measures in place, stat. More →

52 Comments

Sony execs: We’re still investigating privacy breach, putting new security system in place

By on May 17, 2011 at 6:39 PM.

Sony execs: We’re still investigating privacy breach, putting new security system in place

Speaking to The New York Times in an interview on Tuesday, Sony’s CEO Howard Stringer discussed the company’s recent security breach, and what his firm is doing to make sure such a large scale attack doesn’t happen again. Stringer argued that Sony reported the breach quickly, despite waiting nearly a week to notify its customers that hackers had stolen personal information, including credit card numbers. “We still have a lot of investigation to do to find out how this happened, but we’re not there yet,” Stringer explained. Sony’s corporate executive officer and executive vice president, Kazuo Hirai, said also noted that Sony is working to examine security on “every level of the company … from televisions to eBooks, and onwards.” Sony will create new security positions within the company, and the security employees with be tasked with setting up a “system to avoid this type of event again — putting a new system in place,” Hirai explained. Sony began restoring its PlayStation Network services in the United States last weekend after issuing a firmware update for the PlayStation 3. More →

5 Comments

Sony: ‘At least a few more days’ before PSN service restored

By on May 10, 2011 at 11:40 PM.

Sony: ‘At least a few more days’ before PSN service restored

On its PlayStation Network blog today, Sony gave an official statement on when the PlayStation Network will be back online. The short answer is “at least a few more days.” Sony has also promised that both Qriocity and PSN should be available by May 31, however, so it could take a bit longer, too. Both networks went down after Sony suffered a massive security breach during which hackers stole 12.3 million credit card numbers and compromised personal data from 101 million accounts. “I know you all want to know exactly when the services will be restored,” Sr. Director, Corporate Communications & Social Media Patrick Seybold wrote on Sony’s PSN blog. “At this time, I can’t give you an exact date, as it will likely be at least a few more days. We’re terribly sorry for the inconvenience and appreciate your patience as we work through this process.” More →

23 Comments

Capcom exec says Sony breach cost his company ‘hundreds of thousands, if not millions’ of dollars

By on May 10, 2011 at 10:50 AM.

Capcom exec says Sony breach cost his company ‘hundreds of thousands, if not millions’ of dollars

Capcom senior vice president Christian Svensson has voiced his opinion over the Sony’s massive security breach on the Capcom forums. “As an executive responsible for running a business, the resulting outage [is] obviously costing us hundreds of thousands, if not millions of dollars in revenue that were planned for within our budget,” Svensson said in a public forum response. “These are funds we rely on to bring new games to market for our fans.” Capcom has a storefront that offers users the option to purchase extra game content on the PlayStation Network. Svenesson clarified in another post and added that he — and perhaps Capcom, too — is more frustrated with the hackers than with Sony, which he views as the victim. More →

23 Comments

Sony to restore access to PlayStation Network by May 31st

By on May 9, 2011 at 4:31 PM.

Sony to restore access to PlayStation Network by May 31st

Sony will access to its PlayStation Network and Qriocity services by May 31st, Bloomberg is reporting. Sony took its networks offline after a confirmed 101 million accounts were compromised and 12.3 million credit card numbers were stolen by hackers. Sony’s president, chairman, and CEO, Howard Stringer, has said Sony is “absolutely dedicated to restoring full and safe service as soon as possible,” and has promised users a “Welcome Back” package that includes a free month of its PlayStation Plus service, as well as credit for the downtime. More →

55 Comments