Sony Thwarts Mass Account Break-In

October 12, 2011 -

Last night Sony's new SVP & Chief Information Security Officer, Philip Reitinger wrote a lengthy post on the official PlayStation Blog, detailing some questionable mass logins. While some of those attempts to login to accounts by unknown persons were successful, Reitinger assures the public that those accounts have been identified by the company and temporarily locked down. So even though someone is trying to break into accounts for Sony Entertainment Network, PlayStation Network and Sony Online Entertainment, they were not ultimately successful in doing so.

To Sony's credit, at least they are telling subscribers of these services sooner rather than later. Reitinger's complete statement can be found below:

We want to let you know that we have detected attempts on Sony Entertainment Network, PlayStation Network and Sony Online Entertainment (“Networks”) services to test a massive set of sign-in IDs and passwords against our network database. These attempts appear to include a large amount of data obtained from one or more compromised lists from other companies, sites or other sources. In this case, given that the data tested against our network consisted of sign-in ID-password pairs, and that the overwhelming majority of the pairs resulted in failed matching attempts, it is likely the data came from another source and not from our Networks. We have taken steps to mitigate the activity.

Less than one tenth of one percent (0.1%) of our PSN, SEN and SOE audience may have been affected. There were approximately 93,000 accounts globally (PSN/SEN: approximately 60,000 accounts; SOE: approximately 33,000) where the attempts succeeded in verifying those accounts’ valid sign-in IDs and passwords, and we have temporarily locked these accounts. Only a small fraction of these 93,000 accounts showed additional activity prior to being locked. We are currently reviewing those accounts for unauthorized access, and will provide more updates as we have them. Please note, if you have a credit card associated with your account, your credit card number is not at risk. We will work with any users whom we confirm have had unauthorized purchases made to restore amounts in the PSN/SEN or SOE wallet.

As a preventative measure, we are requiring secure password resets for those PSN/SEN accounts that had both a sign-in ID and password match through this attempt. If you are in the small group of PSN/SEN users who may have been affected, you will receive an email from us at the address associated with your account that will prompt you to reset your password.

Similarly, the SOE accounts that were matched have been temporarily turned off. If you are among the small group of affected SOE customers, you will receive an email from us at the address associated with your account that will advise you on next steps in order to validate your account credentials and have your account turned back on.

We want to take this opportunity to remind our consumers about the increasingly common threat of fraudulent activity online, as well as the importance of having a strong password and having a username/password combination that is not associated with other online services or sites. We encourage you to choose unique, hard-to-guess passwords and always look for unusual activity in your account.


Comments

Re: Sony Thwarts Mass Account Break-In

This is definitely a good thing and something I'm going to be keeping my eye on.  You're going to want to look at Kodak 6150, Nuwave Oven Scam, and Bose Cinemate Review for some excellent info on some products. 

Re: Sony Thwarts Mass Account Break-In

About time they start getting this thing figured.  

Check out Roomba Review for all the info.

Re: Sony Thwarts Mass Account Break-In

Evidently, someone didn't get the memo that Sony beefed up their security.

Re: Sony Thwarts Mass Account Break-In

Someone was bound to test it out for themselves.

Re: Sony Thwarts Mass Account Break-In

A big step in the right direction.

 
Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
ZippyDSMleeIf publishers didn't play the region lock game then it would not be an issue.Tho I have seen more russian/chec games than asia ones on ebay.If they do not like it then mabye lower thier region prices to make alitte vrs none.09/22/2014 - 9:54am
MaskedPixelantehttp://hexus.net/gaming/news/industry/74981-pc-game-code-stripping-widespread-says-report/ Thievery, or perhaps the very idea of capitalism? You decide!09/22/2014 - 9:47am
MaskedPixelantehttps://www.youtube.com/watch?v=oDPCmmZifE8 John Oliver exposes Miss America.09/22/2014 - 9:00am
james_fudgeI reiterate now - not one email to-date.09/22/2014 - 8:37am
james_fudgeAnd this: https://archive.today/uIjwE09/22/2014 - 8:37am
james_fudgeLet me put this here: https://archive.today/hbtQJ09/22/2014 - 8:35am
InfophileRelevant to this site: http://nielsenhayden.com/makinglight/archives/015984.html#015984 - Apparently allowing comments to be downvoted leads to worse behaviour09/22/2014 - 6:18am
Andrew EisenMP - I love that game but damn my squadmates are bozos.09/21/2014 - 10:05pm
MaskedPixelanteSWAT teams should be banned until they; 1. Learn not to walk into enemy fire, 2. Learn to throw the flashbang INTO the doorway, not the frame and 3. Stop complaining that I'm in their way.09/21/2014 - 9:53pm
Craig R.I'm getting of the opinion that SWAT teams nationwide should be banned. This probably isn't even the most absurd situation in which they've been used.09/21/2014 - 9:26pm
Andrew EisenAnd, predictably, it encouraged more parody accounts, having the exact opposite effect than what was intended.09/21/2014 - 7:07pm
E. Zachary KnightThis is called a police state people. When public officials can send SWAT raids after anyone for any offense, we are no longer free.09/21/2014 - 6:41pm
E. Zachary KnightJudge rules SWAT raid tageting parody Twitter account was justified. http://www.theguardian.com/world/2014/sep/19/illinois-judge-swat-raid-parody-twitter-peoria-mayor09/21/2014 - 6:41pm
MechaTama31quik: But even if it did break, at worst it is only as bad as the powder. Even that is assuming that it is dangerous through skin contact, which is not a given if its delivery vehicle is a syringe.09/21/2014 - 4:30pm
MaskedPixelantehttp://www.forbes.com/sites/insertcoin/2014/09/20/isis-uses-gta-5-in-new-teen-recruitment-video/09/21/2014 - 4:25pm
quiknkoldSyringes can break. And in a transcontinental delivery, the glass could've broken when crushed. I work in a mail center. Shit like this is super serious09/21/2014 - 3:25pm
E. Zachary KnightIt doesn't matter what is inside the needle. As long as it requires him to take the step of purposefully injecting himself, the threat of the substance is as close to zero as you can get.09/21/2014 - 1:27pm
quiknkoldEzach: I'm not talking about the needle. I'm talking about what's inside. Geeze. Depending on what it is, the sender could be guilty of bioterrorism.09/21/2014 - 12:51pm
E. Zachary Knightquiknkold, No. That syringe is not worse than white powder or a bomb. The syringe requires the recipient to actually inject themselves. Not true for other mail threats.09/21/2014 - 12:49pm
Andrew EisenThe closest to a threat I ever received was a handwritten note slipped under my door that read "I KNOW it was you." Still no idea what that was about. I think the author must have got the wrong apartment.09/21/2014 - 12:28pm
 

Be Heard - Contact Your Politician