Hackers hit Sony Playstation Network & Oriocity accounts

Discussion in 'Chit Chat' started by TwoCatDoctors, Apr 30, 2011.

  1. TwoCatDoctors

    TwoCatDoctors New Member


    April 27, 2011

    The revelation yesterday that Sony has discovered PlayStation Network and Qriocity accounts have been hacked, has understandably got anyone with one of those accounts worried.

    What exactly has been taken and what should you do about it? Here’s a brief guide that we hope you find useful.

    The information taken by the hacker includes:

    * Your full name
    * Your address for billing
    * Your address for shipping
    * Country
    * Email address
    * Full birth date
    * PSN ID and/or Qriocity ID
    * PSN password and/or Qriocity password
    * Security questions and answers for both PSN and Qriocity accounts
    * Your full purchase history of digital products
    * Any sub-accounts will also have the same information compromised
    * Potentially: Credit card number and expiry date

    Effectively the hacker who took this information knows a lot about you, and depending on his/her intentions could use it in an attempt to make some money. This could be done by selling the information on which would then be used in phishing attacks, identity theft, or some form of contact attempt. Any contact will likely seem convincing as so much is known about each user from Sony’s compromised servers.

    There are a number of actions you can take to limit your exposure to any malicious activity both now and when PSN and Qriocity come back online.

    What to do now

    It’s unclear whether credit card details were taken or not, but Sony is not taking any chances and guessing they may have been. What you need to do is find out which card is associated with your PSN account and start looking through transactions from April 17 onwards. Is there anything unusual on your transaction history?

    Even if there isn’t yet, it is possible they could appear in the future so you need to continue to check for the next few months. Alternatively, if the card is near its expiration date, or you don’t rely on it on a daily basis, phone up your bank and tell them you want a replacement because of this Sony issue. That will get the card cancelled and a new one sent out in a few days. It also guarantees no money will be stolen from your account.

    Sony has offered some further advice for U.S. residents regarding obtaining a free credit report. You can view the advice and contact details of credit bureaus on the PlayStation.com PSN update post.

    Another problem to be aware of is reuse of username and password information. Have you used the same login details from your PSN account elsewhere? If so, you need to change them as soon as possible to ensure further accounts are not accessed. It doesn’t matter what type of accounts you have reused the login details with, change them. Remember, the hacker has answers to security questions as well as your passwords. If those same questions are used on other accounts it makes it easier to gain access. Update all the security information you can on your different online accounts.

    Finally, be vigilante with any emails, phone calls, or offers in the post etc. you receive in the coming weeks. These people know where you live, how to contact you via email, and what products you have purchased. It won’t be hard for them to contact you with a very official and legitimate-looking e-mail or call pretending to be from Sony. Be on your guard and treat anything like this with suspicion. Sony is not going to contact you in this way.

    What to do when PSN/Qriocity is back online

    If you follow the advice given above then the only thing left to do is change your account details stored with your PSN and Qriocity accounts. That means as soon as Sony say the service is live you need to change your username and password (and security questions if possible).

    As far as we know, Sony is not going to reset everyone’s account and it’s up to the individual to do this. We urge you to do it as soon as you have access to your account again.

    It’s already been said, but it’s worth repeating. Keep an eye on your bank transactions and be extra careful filtering through your correspondence. The amount of information leaked makes it that much easier for those with malicious intentions to trick you into believing something is legitimate.

    FROM: http://www.geek.com/articles/games/i-have-a-psn-account-what-should-i-do-20110427
  2. Mikie

    Mikie Moderator

    From Lifelock. They monitor the use of your SSN to help prevent fraud. Of course, if anyone ever hacks Lifelock, we're screwed (and not in the good way :)

    Love, Mikie