Your SOE Account May Be Hacked

geldonyetich · May 2, 2011

Your SOE Account Is Hacked

The recent massive data leak that caused their PS3 online services down time has apparently extended to SOE.

Dear Valued Sony Online Entertainment Customer:
Our ongoing investigation of illegal intrusions into Sony Online Entertainment systems has discovered that hackers may have obtained personal customer information from SOE systems. We are today advising you that the personal information you provided us in connection with your SOE account may have been stolen in a cyber-attack. Stolen information includes, to the extent you provided it to us, the following: name, address (city, state, zip, country), email address, gender, birthdate, phone number, login name and hashed password.

Customers outside the United States should be advised that we further discovered evidence that information from an outdated database from 2007 containing approximately 12,700 non-US customer credit or debit card numbers and expiration dates (but not credit card security codes) and about 10,700 direct debit records listing bank account numbers of certain customers in Germany, Austria, Netherlands and Spain may have also been obtained - we will be notifying each of those customers promptly.

There is no evidence that our main credit card database was compromised. It is in a completely separate and secured environment.

Source: http://www.soe.com/securityupdate/

Xaldin · May 2, 2011

I think it is safe to say we're beyond the 'might' realm and into the 'is' realm. When they eventually come back up everyone needs to change their password and if they use the password from SOE anywhere else they should change it. Those hashes really aren't exactly what we'd call military grade encryption.

Adraeus · May 3, 2011

Xaldin said: ↑

Those hashes really aren't exactly what we'd call military grade encryption.

You don't even know what standard they used.

geldonyetich · May 3, 2011

Xaldin said: ↑

I think it is safe to say we're beyond the 'might' realm and into the 'is' realm.

Agreed, topic updated.

Somebody on RPS mentioned it was "hashed without salt" but I'm not sure what their source is on that.

[video=youtube;Cwn4R_GexLM]http://www.youtube.com/watch?v=Cwn4R_GexLM[/video]

Log in or Sign up

Your SOE Account May Be Hacked

geldonyetich Noob

Xaldin Noob

Adraeus Noob

geldonyetich Noob

Log in or Sign up

Your SOE Account May Be Hacked

geldonyetich Noob

Xaldin Noob

Adraeus Noob

geldonyetich Noob

Useful Searches