Between the Lines

Larry Dignan, Andrew Nusca and Rachel King

Sony keeps it honest after latest security breach

By | October 12, 2011, 10:36am PDT

Summary: Sony is saving face, and therefore customers, with a preemptive note to PlayStation Network members.

When Sony’s PlayStation Network suffered a major, worldwide security breach, putting millions of people’s identities at risk, one of the biggest complaints from customers asked why didn’t Sony say something sooner.

This time, Sony obviously learned a good lesson in PR and is being honest from the get-go.

In a note to PlayStation Network members, Sony’s chief information security officer Philip Reitinger wrote that there have been several attempts detected on the following services: the Sony Entertainment Network, the PlayStation Network and Sony Online Entertainment.

Specifically, these hackers tried to “test a massive set of sign-in IDs and passwords against our network database,” which turned out that most of the matches failed and the data probably came from a source other than Sony.

Nevertheless, less than one tenth of one percent of the PSN, SEN and SOE audience might have been affected, breaking down to approximately 93,000 accounts globally (PSN/SEN: approximately 60,000 accounts; SOE: approximately 33,000) where the attempts succeeded.

But Sony insists that credit card numbers are not at risk.

The full note is available on the official PlayStation blog, but here’s an excerpt about Sony’s strategy in this situation:

As a preventative measure, we are requiring secure password resets for those PSN/SEN accounts that had both a sign-in ID and password match through this attempt. If you are in the small group of PSN/SEN users who may have been affected, you will receive an email from us at the address associated with your account that will prompt you to reset your password.

Similarly, the SOE accounts that were matched have been temporarily turned off. If you are among the small group of affected SOE customers, you will receive an email from us at the address associated with your account that will advise you on next steps in order to validate your account credentials and have your account turned back on.

Based on the comments section below the post, the responses from PSN members are remarkably different in tone from what we saw in April — and even what we’ve seen from customers of other companies following major announcements. (Seriously, have you seen the comments following Netflix CEO’s Reed Hastings posts after the Qwikster debacle? Talk about rage and bitterness.)

Not this time. Instead, many commenters said thank you to Sony for being so upfront about the situation this time, no matter how much smaller it might be. Sony is finally being as transparent as it should have been in the first place, giving PSN members adequate time to react to what could be a very serious situation for some of them.

Sony just need to keep us all posted from here on out.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Rachel King is a staff writer for ZDNet based in San Francisco.

Disclosure

Rachel King

Rachel King has no business relationships, affiliations, investments, or other potential conflicts of interest relating to the content posted in this blog.

Biography

Rachel King

Rachel King is a staff writer for CBS Interactive in San Francisco. Before serving as a contributing editor at ZDNet in New York City for two years, she previously worked for The Business Insider, FastCompany.com, CNN's San Francisco bureau and the U.S. Department of State. Rachel has also written for MainStreet.com, Irish America Magazine and the New York Daily News, among others. Rachel has a B.A. in Mass Communications and History from the University of California, Berkeley and a M.S. in Journalism from Columbia University, where she served as art director for the student magazine, Plated.

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?
7
Comments

Join the conversation!

Just In

RE: Sony keeps it honest after latest security breach
turrenti@... 13th Oct
@Dr_Zinj
I wouldn't imagine that would matter if they were getting your info from the back end.
I find Sony doing anything honestly highly suspect considering their previous track record. I personally stopped buying anything Sony after the rootkit fiasco.
0 Votes
+ -
Ditto
bruceslog 12th Oct
@smashandgrab
Same here.
@smashandgrab I for one logged into Everquest 2 last night without any problems. Of course my password is a pain in the butt to hack. I think the mean time to crack it was something like 3 months as of last week.
@Dr_Zinj
I wouldn't imagine that would matter if they were getting your info from the back end.
Sony will send an email for a password reset? Ha, social engineering scammers will just love this!!!
That's what I thourght sad
0 Votes
+ -
Still wary.
SenorAlejandro 13th Oct
For me, the quality of product is still high enough to warrant using it despite the sucky behavior of the provider, but I have very little respect left for the company itself.
While I do believe in and allow for genuine change and improvement, I take this announcement with a grain of salt--there's still a good part of me that asks, "So what are they NOT saying as they inform us of this attack?" I hope for everyone's sake it's nothing...

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix