PS4 News on Facebook! PS4 News on Twitter! PS4 News on YouTube! PS4 News RSS Feed!

Home PS4 News - Latest PlayStation 4 and PS3 News

211w ago - Update: PSN is now back online in Japan, and Kaz Harai has made available a video statement with all the related details.

Following news that PSN internal testing is currently underway, today the official PlayStation Japan site has issued an update regarding the PlayStation Network outage alongside details from the official letter Sony sent out to their publishing partners.

To quote, roughly translated: "PlayStation Network” and “Qriocity” and continued failure, I am sorry indeed. As we told the other day with the latest information in regard to future service restart, will be conducted in stages on a regional basis to ensure the safety of our customers.

We are preparing to be able to resume service as soon as possible in Japan, and is now doing the verification stage for ensuring the safety and security, providing more advanced. Server to complete the relocation of more secure facilities, further strengthening the encryption, firewalls and expansion of new customers with peace of mind again on “PlayStation Network” and “Qriocity” to stay.

We also are supporting the monitoring and the introduction of warning systems to facilitate early detection of cyber attacks, subjected to a system upgrade intended to eliminate vulnerabilities, established a system to ensure information management to protect important personal information of customers.

For those of you committed to ensuring safety, but would take some time for some time now, humbly thank you for your understanding. For the latest information, this website will guide you at any time. To everyone of our customers and partners, we deeply apologize for the inconvenience and inconvenience."

In related news, IndustryGamers.com has shared a copy of the official letter Sony SVP Rob Dyer sent out regarding PSN to their publishing partners, as detailed below:

Dear Partner:

As you know, certain PlayStation Network, Qriocity and Sony Online Entertainment service user account information was compromised in criminal attacks against our networks. I want to assure you, as a PlayStation partner, that it is Sony’s top priority to restore our network operations and see that business is returned to usual as soon as possible.

We are working around the clock to restore service, but will do so only when we can ensure that the network can operate safely and securely. In the meantime, we greatly appreciate your patience, understanding and goodwill.

What Happened?

  • On Tuesday, April 19, 2011, Sony discovered that several PlayStation Network servers unexpectedly rebooted themselves and that unplanned and unusual activity was taking place on the network. This activity triggered an immediate response.


  • Sony mobilized a larger internal team to assist the investigation of the four suspect servers. That team discovered the first credible indications that an intruder had been in the PlayStation Network system, and six more servers were identified as possibly being compromised. Sony immediately decided to shut down all of the PlayStation Network services in order to prevent any additional damage.


  • The scope and complexity of the investigation grew substantially as additional evidence about the attack developed.


  • The forensic teams were able to confirm that intruders had used very sophisticated and aggressive techniques to obtain unauthorized access, hide their presence from system administrators and escalate privileges inside the servers. Among other things, the intruders deleted log files in order to hide the extent of their work and activity within the network.


  • On Sunday May 1, using information uncovered by the forensic teams, engineers at Sony Online Entertainment (SOE) discovered that data had also been taken from their servers. They, too, shut down operations and on Monday, May 2, announced the discovery.

What Data Are Affected?

As you may know, personal data was stolen from approximately 77 million PlayStation network and Qriocity service accounts.

As of this writing, there remains no evidence that the credit card information was stolen and the major credit card companies are still reporting that they have not seen an increase in fraudulent transactions due to this event.

What Steps Are Being Taken?

We have taken aggressive action to give consumers peace of mind, protect them against the abuse of their data, and enhance our security systems moving forward.

We have already advised our consumers in the U.S. that we will offer complimentary identity theft protection services through a leading provider, including an insurance program of up to $1 million. Similar programs are being developed in other markets around the world.

In addition, Sony is taking a series of steps to enhance security of our network infrastructure. They include but are not limited to:

  • adding additional automated software monitoring and configuration management to help defend against new attacks;


  • enhanced levels of data protection and encryption, as well as additional penetration and vulnerability testing;


  • enhanced capabilities to detect software intrusions within the network, unauthorized access and unusual activity patterns;


  • implementation of additional firewalls;


  • expediting a planned move of the system to a new data center in a different location with enhanced security; and


  • appointment of a new Chief Information Security Officer.

Finally, to thank our customers for their patience and loyalty, we are offering them “welcome back” packages as soon as the networks are restored, including free downloads of selected PlayStation entertainment, 30 days of free service as well as service extensions for the number of days PSN and Qriocity services were unavailable, with similar benefits for Music Unlimited subscribers.

Looking Ahead

We of course deeply regret that this incident has occurred. We are working closely with the FBI to identify and apprehend the culprits who committed this crime against our consumers, our partners and our company. I know you can appreciate how widespread the problem of cybercrime is in society today. Although no company is immune, we are confident our consumer data will be protected by some of the best security measures available today.

As a valued partner we aim to keep the lines of communication open so that you are aware of our progress. Our focus has been to confirm the security of the networks, protect customer data and get the services back on line as quickly as possible. We will do our best to respond to all of your inquiries and we will do everything we possibly can to support you.

We are doing everything we can to bring these services back online as soon as possible. We will update you with more information as soon as we can, but please call your account executive if you have further questions. We thank you for your patience and look forward to moving ahead together in the months and years to come.

Very truly yours,

Rob Dyer

SVP, Publisher Relations





Sony PSN Japan Update, Publishing Partners Letter Detailed

Sony PSN Japan Update, Publishing Partners Letter Detailed

Sony PSN Japan Update, Publishing Partners Letter Detailed

Follow us on Twitter, Facebook and drop by the PS3 Hacks and PS3 CFW forums for the latest PlayStation 3 scene and PS4 Hacks & JailBreak updates with PlayStation 4 homebrew PS4 Downloads.




#261 - barrybarryk - 212w ago
barrybarryk's Avatar
I just got a SOE email too, ppft kind of makes me glad all my details are false given they've now lost them twice.

#260 - elser1 - 212w ago
elser1's Avatar
interesting.. can anyone find such thing for australians to join? pm me with details if possible.. thanks

michael

#259 - PS4 News - 212w ago
PS4 News's Avatar
Yep, here is another follow-up to our previous article. To quote: http://www.mcst.ca/ClassActions/ClassActionsHome/SonyPSN/
McPhadden Samac Tuovi LLP has commenced a class action against Sony Corporation and other Sony companies related to the theft from Sony of personal information of PlayStation network and Qriocity service users. The theft may also include user credit card information.

The action has been brought on behalf of all persons in Canada who used Sony's online PlayStation network or Qriocity services up to May 2, 2011, and who provided Sony with personal and/or credit or debit card information.

Additional information about the lawsuit may be found in the firm’s media release, which can be found on this website.

If you would like information about this lawsuit, please contact us directly.

Toronto – May 2, 2011
For Immediate Release
Canadian Sony PlayStation Network Class Action

Sony has announced that personal information for 77 million PlayStation and Qriocity users worldwide, 1 million of which are in Canada, has been hacked. It has been alleged that Sony was aware that such information had been stolen but failed to advise users of PlayStation and Quriocity in a timely fashion.

Sony has acknowledged that stolen information may include users’ names, addresses (city, province, postal code), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID and user profile data, including purchase and usage history and billing address (city, province, postal code), and the subscriber’s PlayStation Network/Qriocity password security answers. The same data with respect to a dependent may also have been obtained.

Sony is not able to say whether user credit card or debit card information was also taken. Sony has acknowledged and apologized for breach. To date, the only compensation Sony has offered is 30 or 60 day free memberships on its PlayStation network. While Sony has advised American users about the availability of free credit reports, it has yet to advice Canadian users about credit reports.

The Toronto law firm McPhadden Samac Tuovi LLP has commenced a proposed class action against Sony Japan, Sony USA, Sony Canada and other Sony entities (“Sony” for the breach of privacy. The lawsuit claims damages in excess of $1 billion, which includes having Sony pay the costs of credit monitoring services and fraud insurance coverage for two years.

The plaintiff in the action is 21 year old Mississauga resident who has been an avid PlayStation user for years. Natasha Maksimovic said: “If you can’t trust a huge multi-national corporation like Sony to protect your private information, who can you trust. It appears to me that Sony focuses more on protecting its games than its PlayStation users.”

#258 - oldschool400 - 212w ago
oldschool400's Avatar
I came across this article: http://www.thestar.com/news/article/984932--proposed-class-action-suit-filed-against-sony?bn=1

#257 - leukotic - 212w ago
leukotic's Avatar
So apparently the breach in SOE happened the same time as the PSN breach, however they are only figuring this out now? Sounds like they would have never found out if the PSN breach didn't happen, because they wouldn't have done the investigation into SOE as a precaution.

Either it was a really good hack or their systems are incredibly sub-par (perhaps both).

#256 - PS4 News - 212w ago
PS4 News's Avatar
Here is today's SOE Press Release, doesn't seem like much new from yesterday's initial one though: http://blog.eu.playstation.com/2011/05/03/sony-online-entertainment-issues-security-press-release/
Some of you may have heard today about an announcement from Sony Online Entertainment confirming that they were also victims of a malicious hack. As this could affect those of you with SOE accounts, they have asked us to post their press release on the blog, which should answer some of your questions.

Sony Online Entertainment Announces Theft of Data from Its Systems

Breach believed to stem from initial criminal hack of SOE. Tokyo, May 3, 2011

- Sony Corporation and Sony Computer Entertainment announced today that their ongoing investigation of illegal intrusions into Sony Online Entertainment LLC (SOE, the company) systems revealed yesterday morning (May 2, Tokyo time) that hackers may have stolen SOE customer information on April 16th and 17th, 2011 (PDT). SOE is based in San Diego, California, U.S.A.

This information, which was discovered by engineers and security consultants reviewing SOE systems, showed that personal information from approximately 24.6 million SOE accounts may have been stolen, as well as certain information from an outdated database from 2007. The information from the outdated database that may have been stolen includes approximately 12,700 non-U.S. credit or debit card numbers and expiration dates (but not credit card security codes), and about 10,700 direct debit records of certain customers in Austria, Germany, Netherlands and Spain.

With the current outage of the PlayStation® Network and Qriocity™ services and the ongoing investigation into the recent attacks, SOE had also undertaken an intensive investigation into its system. Upon discovery of this additional information, the company promptly shut down all servers related to SOE services while continuing to review and upgrade all of its online security systems in the face of these unprecedented cyber-attacks.

On May 1, Sony apologized to its customers for the inconvenience caused by its network services outages. The company is working with the FBI and continuing its own full investigation while working to restore all services.

Sony is making this disclosure as quickly as possible after the discovery of the theft, and the company has posted information on its website and will send e-mails to all consumers whose data may have been stolen.

The personal information of the approximately 24.6 million SOE accounts that was illegally obtained, to the extent it had been provided to SOE, is as follows:

• name
• address
• e-mail address
• birthdate
• gender
• phone number
• login name
• hashed password.

In addition to the information above, the 10,700 direct debit records from accounts in Austria, Germany, Netherlands and Spain, include:

• bank account number
• customer name
• account name
• customer address.

SOE will grant customers 30 days of additional time on their subscriptions, in addition to compensating them one day for each day the system is down. It is also in the process of outlining a "make good" plan for its PlayStation®3 MMOs (DC Universe Online and Free Realms). More information will be released this week.

Additionally, the company is committed to helping its customers protect their personal data and will provide a complimentary offering to assist users in enrolling in identity theft protection services and/or similar programs. The implementation will be at a local level and further details will be made available shortly in each region.

Sony Online Entertainment LLC (SOE) has been a recognized worldwide leader in massively multiplayer online games since 1999. Best known for its blockbuster hits and franchises, including EverQuest®, EverQuest® II, Champions of Norrath®, PlanetSide®, Free Realms®, Clone Wars Adventures™, and DC Universe Online™, SOE creates, develops and provides compelling online entertainment for virtually all platforms, including the PlayStation®3 Computer Entertainment System, Personal Computer, mobile and social networks. SOE is building on its proven legacy and pioneering the future of the interactive entertainment space through creative development and inspired gameplay design for audiences of all ages. To learn more, visit www.soe.com.

For more information and update about the SOE services, please visit www.soe.com/securityupdate.

#255 - elser1 - 213w ago
elser1's Avatar
maybe it was the CIA who hacked into psn to get bin ladens address in order to kill him... LOL

#254 - geowrian - 213w ago
geowrian's Avatar
Maybe this attack is due to CFW and piracy, too? Good job, Sony. I'm curious to see if this breech was done by the same person/people. If not, Sony is screwed - that would indicate a huge, systematic problem, not just some hackers getting into a system. That happens all the time...Sony's just a large player. Multiple exploits across multiple systems by multiple people indicates a major failure in design, both in the application and infrastructure layers.

If it was the same group, that's still not saying much that they were able to break in and get info without being noticed, then break in elsewhere a little later and get even more info. That's still gross incompetence.

#253 - GrandpaHomer - 213w ago
GrandpaHomer's Avatar
Quote Originally Posted by leukotic View Post
So what else does Sony have that can be breached to lose millions more accounts?


What about their eBook store ... ?

#252 - elser1 - 213w ago
elser1's Avatar
LOL barry.. i wish i could make my own rules and get away with what sony does... i guess if sony was a mate youd think he was kool... LOL

so anybody know a time and date when the bloody psn is back?