Kristopher Johns has filed a class action lawsuit against Sony after the theft of private data from the Sony PSN user database. The suit alleges the use of unsecured data procedures and unreasonable delays in bringing the PSN service back online. The lawsuit has been filed in US District Court for the Northern District of California and there has been no response from Sony at this point of time.
In a email sent to PSN users Sony said that “illegal and unauthorized intrusion into our network,” had been discovered “between April 17 and April 19, 2011.” It advises users to check “account statements and to monitor your credit reports.” It is believed that name, address, email address, birthdate, login details, PSN ID as well as purchase history could of been accessed. More information on the outage and details for protecting privacy for the affected customers are available on the frequently asked questions page on the Sony website.
In a blog post, Patrick Seybold; Sr. Director, Corporate Communications & Social Media; said “the personal data table, which is a separate data set, was not encrypted.” It appears that only credit cards details were encrypted in the database. Sony is currently moving data to a new data center to provide better security in the future. A new software update from Sony will force users to change their password.
Anonymous, separate groups of hacktivists who act anonymously under the group name, have said that they were not responsible. The group was believed as a suspect initially as they started Operation Sony after a lawsuit against George Hotz, a hacker of the iPhone and Sony PlayStation (see above video). The operation reportedly took down the PlayStation website and PlayStation Store and advises users to return Sony products. Anonymous have said they ‘are not aiming to attack customers of Sony.’