Millions of Passwords, Credit Card Numbers at Risk in Breach of Sony Playstation Network
Summary: Sony disclosed that intruders breached its PlayStation Network and Qriocity music service between April 17 and April 19, 2011, potentially compromising the names, addresses, passwords, email addresses, birthdates and PSN IDs of up to 70 million customers. Sony said it had no evidence credit card data was taken but could not rule it out, warning that card numbers (excluding security codes) and expiration dates may have been obtained, and it acknowledged the breach on April 22 before disclosing its extent on April 26.
Bottom line: Up to 70 million accounts were exposed, and Sony kept the severity quiet for roughly a week after the network went offline, drawing ire from users who learned the scope only on the day of the blog post. A cited Reddit account from psx-scene.com attributes the breach to a custom PS3 firmware called REBUG that let users reach a developer network where, it claims, credit card numbers were never authenticity-checked.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026