Just when you think that Sony has gotten past the worst from the attack on the Playstation Network, Sony Online Entertainment is confirming a report today that their PS3 and PC games servers have been brought down along with the theft of personal information for approximately 24.6 million accounts and credit card data.
This news seems like deja vu as SOE warns customers that “personal information you provided us in connection with your SOE account may have been stolen in a cyber-attack. Stolen information includes, to the extent you provided it to us, the following: name, address (city, state, zip, country), email address, gender, birthdate, phone number, login name and hashed password.”
To make matters worse, SOE says that an older database from 2007 that stored credit cards for approximately 12,700 credit card and 10,700 direct debit accounts in Germany, Austria, Netherlands and Spain was also compromised. The credit card numbers and expiration dates were stolen but not the security codes.
SOE says that they currently do not have any evidence that its main credit card database has been compromised.
To its credit, SOE says that it discovered that its servers had been compromised on May 1 and decided to bring the servers down and notify customers today. Similar to the PSN outage, SOE has taken steps to hire a forensic investigator to find out who broke into the servers and are taking steps to beef up its security.
This new outage affects games like DC Universe Online, Free Realms, Everquest II, Star Wars: The Clone Wars, Magic: The Gathering – Tactics and other games. No word on when service for these and other games will be restored.
SOE asks that account holders be vigilant of their email and personal information as well as mindful of their credit information. The company has provided acount holder information to the three major credit bureaus in the case.
For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking. When SOE’s services are fully restored, we strongly recommend that you log on and change your password. Additionally, if you use your Station or SOE game account name or password for other unrelated services or accounts, we strongly recommend that you change them, as well.
To protect against possible identity theft or other financial loss, we encourage you to remain vigilant, to review your account statements and to monitor your credit reports. We are providing the following information for those who wish to consider it:
U.S. residents are entitled under U.S. law to one free credit report annually from each of the three major credit bureaus. To order your free credit report, visit www.annualcreditreport.com or call toll-free (877) 322-8228.
We have also provided names and contact information for the three major U.S. credit bureaus below. At no charge, U.S. residents can have these credit bureaus place a “fraud alert” on your file that alerts creditors to take additional steps to verify your identity prior to granting credit in your name. This service can make it more difficult for someone to get credit in your name. Note, however, that because it tells creditors to follow certain procedures to protect you, it also may delay your ability to obtain credit while the agency verifies your identity. As soon as one credit bureau confirms your fraud alert, the others are notified to place fraud alerts on your file. Should you wish to place a fraud alert, or should you have any questions regarding your credit report, please contact any one of the agencies listed below.
Experian: 888-397-3742; www.experian.com; P.O. Box 9532, Allen, TX 75013
Equifax: 800-525-6285; www.equifax.com; P.O. Box 740241, Atlanta, GA 30374-0241
TransUnion: 800-680-7289; www.transunion.com; Fraud Victim Assistance Division, P.O. Box 6790, Fullerton, CA 92834-6790
You may wish to visit the web site of the U.S. Federal Trade Commission at www.consumer.gov/idtheft or reach the FTC at 1-877-382-4357 or 600 Pennsylvania Avenue, NW, Washington, DC 20580 for further information about how to protect yourself from identity theft. Your state Attorney General may also have advice on preventing identity theft, and you should report instances of known or suspected identity theft to law enforcement, your State Attorney General, and the FTC. For North Carolina residents, the Attorney General can be contacted at 9001 Mail Service Center, Raleigh, NC 27699-9001; telephone (877) 566-7226; or www.ncdoj.gov. For Maryland residents, the Attorney General can be contacted at 200 St. Paul Place, 16th Floor, Baltimore, MD 21202; telephone: (888) 743-0023; or www.oag.state.md.us.
Follow us on Facebook or Twitter for the latest news or you can subscribe to our RSS feed or email alerts.