Sponsored Links

Sponsored Links

Sony PlayStation Network Security Update, SOE Now Down


Sponsored Links
191w ago - Today Sony's Senior Director of Corporate Communications & Social Media Patrick Seybold has made available another PlayStation Network security update to clarify some common PSN concerns, as follows:

On Tuesday, April 26 we shared that some information that was compromised in connection with an illegal and unauthorized intrusion into our network. Once again, we'd like to apologize to the many users who were inconvenienced and worried abut this situation.

We want to state this again given the increase in speculation about credit card information being used fraudulently. One report indicated that a group tried to sell millions of credit card numbers back to Sony. To my knowledge there is no truth to this report of a list, or that Sony was offered an opportunity to purchase the list.

One other point to clarify is from this weekend's press conference. While the passwords that were stored were not "encrypted," they were transformed using a cryptographic hash function. There is a difference between these two types of security measures which is why we said the passwords had not been encrypted. But I want to be very clear that the passwords were not stored in our database in [Register or Login to view links] form. For a description of the difference between encryption and hashing, [Register or Login to view links].

To reiterate a few other security measures for your information: Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking.

When the PlayStation Network and Qriocity services are fully restored, we strongly recommend that you log on and change your password. Additionally, if you use your PlayStation Network or Qriocity user name or password for other unrelated services or accounts, we strongly recommend that you change them, as well. To protect against possible identity theft or other financial loss, we encourage you to remain vigilant, to review your account statements and to monitor your credit reports.

We continue to work with law enforcement and forensic experts to identify the criminals behind the attack. Once again, we apologize for causing users concern over this matter.

Our objective is to increase security so our customers can safely and confidently play games and use our network and media services. We will continue to provide updates as we have them.

Sony has also suspended another of its online gaming systems, following the recent PlayStation Network hack. The company took the Sony Online Entertainment (SOE) service offline as part of its wider investigation into security breaches. Multiplayer games including DC Universe and Facebook-based Fortune League were unavailable as a result.

Sony admitted last week that the personal details of 77m PlayStation users may have been stolen by hackers. The suspension of SOE was announced in brief statement on its website, PlayStation.com.

To quote from the [Register or Login to view links]: We have had to take the SOE service down temporarily. In the course of our investigation into the intrusion into our systems we have discovered an issue that warrants enough concern for us to take the service down effective immediately. We will provide an update later today (Monday), it said.

Last week, Sony said that it did not believe SOE users had been affected by the PlayStation Network hack.

A community relations spokesperson wrote on one of Sony's support forums at the time: We have been conducting a thorough investigation and, to the best of our knowledge, no customer personal information got out to any unauthorized person or persons.

We are continuing that investigation and monitoring the situation carefully; should the situation change, we will - of course - promptly notify you.

Sony Online Entertainment designs and publishes online multiplayer games for the PC, PlayStation 3 and, in the case of Fortune League, Facebook.







Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter, Facebook and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene and PlayStation 4 scene updates and fresh homebrew releases!

Comments 341 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles.
 
#336 - elser1 - 189w ago
elser1's Avatar
Quote Originally Posted by daveshooter View Post
• appointment of a new Chief Information Security Officer.

Who's that then? Not our Geo lol.

hah wouldn't be suprised eh!

that would suck!

#335 - daveshooter - 189w ago
daveshooter's Avatar
• appointment of a new Chief Information Security Officer.

Who's that then? Not our Geo lol.

#334 - syphonlord - 189w ago
syphonlord's Avatar
OMG this is really getting boring now, i'm sick of hearing about it. SONY hurry up and sort it out, your not building swiss watches so why is it taking so long. Grrrrrr

#333 - GrandpaHomer - 189w ago
GrandpaHomer's Avatar
Again - just repeating the old song...
Quote Originally Posted by PS3 News View Post
Among other things, the intruders deleted log files in order to hide the extent of their work and activity within the network.

Sony aparently never heard of proper and most of all secure loging to the external / remote systems which has no other direct access from monitored system apart of storing the sent logs itself and indeed constantly backing them up and so on - clueless.

#332 - PS3 News - 189w ago
PS3 News's Avatar
Update: PSN is now back online in Japan, and Kaz Harai has made available a [Register or Login to view links] statement with all the related details.

Following news that PSN internal testing is currently underway, today the official [Register or Login to view links] site has issued an update regarding the PlayStation Network outage alongside details from the official letter Sony sent out to their publishing partners.

To quote, roughly translated: "PlayStation Network” and “Qriocity” and continued failure, I am sorry indeed. As we told the other day with the latest information in regard to future service restart, will be conducted in stages on a regional basis to ensure the safety of our customers.

We are preparing to be able to resume service as soon as possible in Japan, and is now doing the verification stage for ensuring the safety and security, providing more advanced. Server to complete the relocation of more secure facilities, further strengthening the encryption, firewalls and expansion of new customers with peace of mind again on “PlayStation Network” and “Qriocity” to stay.

We also are supporting the monitoring and the introduction of warning systems to facilitate early detection of cyber attacks, subjected to a system upgrade intended to eliminate vulnerabilities, established a system to ensure information management to protect important personal information of customers.

For those of you committed to ensuring safety, but would take some time for some time now, humbly thank you for your understanding. For the latest information, this website will guide you at any time. To everyone of our customers and partners, we deeply apologize for the inconvenience and inconvenience."

In related news, [Register or Login to view links] has shared a copy of the official letter Sony SVP Rob Dyer sent out regarding PSN to their publishing partners, as detailed below:

Dear Partner:

As you know, certain PlayStation Network, Qriocity and Sony Online Entertainment service user account information was compromised in criminal attacks against our networks. I want to assure you, as a PlayStation partner, that it is Sony’s top priority to restore our network operations and see that business is returned to usual as soon as possible.

We are working around the clock to restore service, but will do so only when we can ensure that the network can operate safely and securely. In the meantime, we greatly appreciate your patience, understanding and goodwill.

What Happened?

  • On Tuesday, April 19, 2011, Sony discovered that several PlayStation Network servers unexpectedly rebooted themselves and that unplanned and unusual activity was taking place on the network. This activity triggered an immediate response.


  • Sony mobilized a larger internal team to assist the investigation of the four suspect servers. That team discovered the first credible indications that an intruder had been in the PlayStation Network system, and six more servers were identified as possibly being compromised. Sony immediately decided to shut down all of the PlayStation Network services in order to prevent any additional damage.


  • The scope and complexity of the investigation grew substantially as additional evidence about the attack developed.


  • The forensic teams were able to confirm that intruders had used very sophisticated and aggressive techniques to obtain unauthorized access, hide their presence from system administrators and escalate privileges inside the servers. Among other things, the intruders deleted log files in order to hide the extent of their work and activity within the network.


  • On Sunday May 1, using information uncovered by the forensic teams, engineers at Sony Online Entertainment (SOE) discovered that data had also been taken from their servers. They, too, shut down operations and on Monday, May 2, announced the discovery.

What Data Are Affected?

As you may know, personal data was stolen from approximately 77 million PlayStation network and Qriocity service accounts.

As of this writing, there remains no evidence that the credit card information was stolen and the major credit card companies are still reporting that they have not seen an increase in fraudulent transactions due to this event.

What Steps Are Being Taken?

We have taken aggressive action to give consumers peace of mind, protect them against the abuse of their data, and enhance our security systems moving forward.

We have already advised our consumers in the U.S. that we will offer complimentary identity theft protection services through a leading provider, including an insurance program of up to $1 million. Similar programs are being developed in other markets around the world.

In addition, Sony is taking a series of steps to enhance security of our network infrastructure. They include but are not limited to:

  • adding additional automated software monitoring and configuration management to help defend against new attacks;


  • enhanced levels of data protection and encryption, as well as additional penetration and vulnerability testing;


  • enhanced capabilities to detect software intrusions within the network, unauthorized access and unusual activity patterns;


  • implementation of additional firewalls;


  • expediting a planned move of the system to a new data center in a different location with enhanced security; and


  • appointment of a new Chief Information Security Officer.

Finally, to thank our customers for their patience and loyalty, we are offering them “welcome back” packages as soon as the networks are restored, including free downloads of selected PlayStation entertainment, 30 days of free service as well as service extensions for the number of days PSN and Qriocity services were unavailable, with similar benefits for Music Unlimited subscribers.

Looking Ahead

We of course deeply regret that this incident has occurred. We are working closely with the FBI to identify and apprehend the culprits who committed this crime against our consumers, our partners and our company. I know you can appreciate how widespread the problem of cybercrime is in society today. Although no company is immune, we are confident our consumer data will be protected by some of the best security measures available today.

As a valued partner we aim to keep the lines of communication open so that you are aware of our progress. Our focus has been to confirm the security of the networks, protect customer data and get the services back on line as quickly as possible. We will do our best to respond to all of your inquiries and we will do everything we possibly can to support you.

We are doing everything we can to bring these services back online as soon as possible. We will update you with more information as soon as we can, but please call your account executive if you have further questions. We thank you for your patience and look forward to moving ahead together in the months and years to come.

Very truly yours,

Rob Dyer

SVP, Publisher Relations




More PlayStation 3 News...

 

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Advertising - Affiliates - Contact Us - PS3 Downloads - PS3 Forums - Privacy Statement - Site Rules - Top - © 2015 PlayStation 3 News