Quantcast
Destructoid Japanator Tomopop Flixist
Dtoid Forums now support TapATalk and ForumRunner on your iOS/Android devices. Whoot.

Hackers claim to be selling PSN users' personal data photo

Security researchers claim to have spotted hackers attempting to sell PlayStation Network user data, presenting perhaps the most worrying installment of the ongoing PSN hack saga

Kevin Stevens, senior threat researcher at Trend Micro, has been putting the word out, warning the public of the situation. The hackers even claimed that they gave Sony a chance to buy back the info, although Sony itself denied that this has occurred. 

Stevens says that the "merchandise" on sale includes full names, addresses, dates of birth, phone numbers, email addresses, passwords, credit card numbers and expiry dates. They're also claiming to have security codes, an issue that Sony has so far not been straight on.

Scary stuff to think about, although Stevens has been attacked by some of Sony's more rabid fans, who are adequately demonstrating "Shoot The Messenger" syndrome. Ignoring security warnings and good advice just because you enjoy a particular videogame console? Some people are truly insane.








More gaming stories around the web. Got news? Submit yours to tips@destructoid.com

Jim Sterling serves as reviews editor for Destructoid.com, head of the Podtoid podcast, and produces a number of news stories, original features, one-of-a-kind videos. With his passionate argumentative style, controversial opinions, harsh delivery, and dedication to brutal honesty Sterling is a name that you can't help but recognize. Likes PS2, iPod Touch, Silent Hill 2, Metal Gear Solid, Dynasty Warriors 3 Meet the rest of the team



Post a comment! You can also post a photo below:

Comment with Facebook





Click connect and comment instantly!

Comment with Dtoid





New? SIGN UP - it takes 5 seconds

175 comments | showing # 1 to 50
prev
next 50 comments

Jawmuncher's Avatar - Comment posted on 04/29/2011 11:22
Jawmuncher
The hole just keeps getting deeper
falsenipple's Avatar - Comment posted on 04/29/2011 11:24
falsenipple
Do you think that these supposed 'hackers' actually have any information to sell, or that that they are just trolling?

My bet is the latter.
CLFresh's Avatar - Comment posted on 04/29/2011 11:26
CLFresh
Fanboys will defend "their" console until the day they grow up and realize you can be tolerant of all consoles and respectful. I mean look at the Socom fanboys, honestly worst online game I've played in a long time and yet there is a rabid following on their forums stating how awesome the game is b.c. it's a SONY exclusive. Just a bigger and bigger shitstorm for SONY, I feel bad but kinda don't because it's their own fault.
Gene Eric's Avatar - Comment posted on 04/29/2011 11:30
Gene Eric
in before zealot fanboys shouting its never Sony's fault. Even if it isn't it doesn't make me feel better either.
Exinjeru's Avatar - Comment posted on 04/29/2011 11:31
Exinjeru
The creditcard info was separately encrypted, so you could steal it along with everything else in the database, but you can't decrypt it easily. Ironically much harder to hack than sony's hardware key. Sony could have had at least a simple encryption on the user data though, instead of storing it in plaintext. Even random people at home encrypt their hard drives with simple encryption to protect against identity theft if their computers are ever stolen.
DtoidBadMrK's Avatar - Comment posted on 04/29/2011 11:31
DtoidBadMrK
This does not bode well for all involved if this is true. Sony really fucked up, but the story is going to keep getting worse before it gets better.
EternalDeathSlayer's Avatar - Comment posted on 04/29/2011 11:31
EternalDeathSlayer
There's no way that chat log is fake. Those guys know what they're talking about, and if it is true, then yes, Sony really doesn't give a fuck about anything. This reeks of laziness and some sort of false sense of invulnerability.

What the fuck is wrong with them? Do they think something as large as PSN could never be a target? WTF?

Fuck PSN.
Mr Andy Dixon's Avatar - Comment posted on 04/29/2011 11:32
Mr Andy Dixon
@Gene Eric

I miss PS :(
qlum's Avatar - Comment posted on 04/29/2011 11:32
qlum
sony should have taken down psn when hackers first explained that it was possible to take the personal data which was in December if they did that the whole mess would have been prevented
magimog's Avatar - Comment posted on 04/29/2011 11:32
magimog
They have the CVC codes, dont kid yourself. My info has been stolen and used on sites that require CVC codes in order to check out. Cancel now and set up other safeguards for your data.
Sexualchocolate's Avatar - Comment posted on 04/29/2011 11:33
Sexualchocolate
Damn, I was hoping for..

"We got your personal data just to fuck Sony over and are now deleting it"

...from Anon or someone.


This is a fucking ballache. I hate to say it, but does anyone else worry this could be a pretty killer blow for Sony. I mean PSN revenue is gonna plummet even when it comes back and a lack of trust will make their uphill struggle even harder.

Dang.
BalloonFighter's Avatar - Comment posted on 04/29/2011 11:33
BalloonFighter
I'll take 3 personal data please.
SayWord's Avatar - Comment posted on 04/29/2011 11:33
SayWord
Read some articles earlier that as of last night there have been no reports from mastercard, or amex (didn't specifiy visa) that credit cards numbers have been stolen or used. I'm not to sure how to properly post links but if you google it you will find those articles.
Gene Eric's Avatar - Comment posted on 04/29/2011 11:35
Gene Eric
@mrandydixon
I can start again but you'd know its gonna be me
wildcatfan87's Avatar - Comment posted on 04/29/2011 11:36
wildcatfan87
even though sony is at fault for this,we keep on straying away from who really needs to pay out and who is also at fault


....the people who got the data.....I really hope the people who are selling this go to jail and pay.
PhunkyPhazon's Avatar - Comment posted on 04/29/2011 11:36
PhunkyPhazon
I called my bank and changed my debit card number, so I'm in the clear. I guess they still have the rest of my personal information, but what good is identity theft without a card number?

I probably shouldn't have said that.
Wolfy-Boey's Avatar - Comment posted on 04/29/2011 11:37
Wolfy-Boey
Not to fuel the fires or anything.

But did anyone notice how none of this ever happens to nintendo? No downtime or security breaches ever.

I guess friend codes were a good afterall.
Gaidenrider's Avatar - Comment posted on 04/29/2011 11:40
Gaidenrider
@CLfresh: What's that have to do with this ._.
mix's Avatar - Comment posted on 04/29/2011 11:40
mix
EVERY month I go over my CC bill....stuff happens.

People can steal you card from debit machine, other websites, key loggers on your PC. My buddies RBC card was stolen and he barely uses it, they spent $1,5000 in Vancouver with a duplicate card or seomthing. I work at a Credit Union and we are not that big roughly 12,000 members, and every so often there are people getting their debit card information stolen, some cases effect 100-150 members at a time just from using their card around town, they don't black list the debit card companies or try to sue them.

@CLFresh
In some instances yes in others, no. I love my PS3 and I am upset about the whole ordeal as I now have to get a new CC (not a big deal) but to blame Sonly 100% is retarded, do homes and cars get 100% blame when people brake into them? Sony was not handing this info out, it was stolen.

My brother loves Socom and he is in no way a Sonly fanboy and owns no other SOCOM titles. I played a round and it wasn't my cup of tea but I've played some shitty games in my days and SOCOM is not the worst, not even close. I played offline and it was playable and I can see why people would like it.
MIKEnJELLO's Avatar - Comment posted on 04/29/2011 11:40
MIKEnJELLO
Well this is going to be fun monitoring my accounts for the next few months for suspicious activity. I completely blame Sony for this breach of security. I've already had my identity stolen once, and I don't want to go through this again.
Gene Eric's Avatar - Comment posted on 04/29/2011 11:40
Gene Eric
@phunkypazon
Me too, just to be safe. I'm not sure if they're gonna mess with information from the asian region but i'm not taking chances
Gene Eric's Avatar - Comment posted on 04/29/2011 11:40
Gene Eric
@phunkypazon
Me too, just to be safe. I'm not sure if they're gonna mess with information from the asian region but i'm not taking chances
Xzyliac's Avatar - Comment posted on 04/29/2011 11:41
Xzyliac
@Sexy
Eh. The clean up will cost them a pretty penny but I don't think it will stop anyone from giving Sony money. The people want their videogames.

Now here in the states people are kinda meh on the hole issue (if they're informed at all) with a few exceptions. In Europe I hear they're losing their shit.
M47R1X's Avatar - Comment posted on 04/29/2011 11:41
M47R1X
I call BS.
cbarrentos's Avatar - Comment posted on 04/29/2011 11:43
cbarrentos
WELL THEN guess it's time for me to call my bank and get a new card. bloody hell.
Everyday Legend's Avatar - Comment posted on 04/29/2011 11:43
Everyday Legend
Already ordered my new debit card. Good f'n luck, suckers.

Also, seriously considering never taking my PS3 online again. All it takes is one time to break my trust.
Lycan XIII's Avatar - Comment posted on 04/29/2011 11:44
Lycan XIII
If the hackers truly did contact Sony, wouldn't Sony have information on them and be able to track them down?
Zepinephrine's Avatar - Comment posted on 04/29/2011 11:44
Zepinephrine
This is why I cancelled my cards, legally changed my name and moved to a new city without leaving a fowarding adress.
SayWord's Avatar - Comment posted on 04/29/2011 11:47
SayWord
I weep for the people that think this is only sony's fault. I know some people are stupid but that is down right retarted to think.
Mr Andy Dixon's Avatar - Comment posted on 04/29/2011 11:49
Mr Andy Dixon
@Xzyliac

"Now here in the states people are kinda meh on the hole issue..."

If there is one thing I'm certain of, it's that we in the States are NEVER "meh" when it comes to a good hole.
Mr Andy Dixon's Avatar - Comment posted on 04/29/2011 11:50
Mr Andy Dixon
@Gene Eric

Make up a new one and don't let me find out this time :)
acetated's Avatar - Comment posted on 04/29/2011 11:51
acetated
The situation sucks. But that header made me lol. Nice work Jim! I just got off the phone with my bank. My new card will be arriving in a few days. As for my address, if anyone wants to drop by I'd be happy to play them in a game of MvC3 or SSFIV since PSN is down.
Gene Eric's Avatar - Comment posted on 04/29/2011 11:51
Gene Eric
@mrandydixon
Hmmm....^___^
tylerstravis's Avatar - Comment posted on 04/29/2011 11:52
tylerstravis
I still don't know what card I had on file!
B P Farrell's Avatar - Comment posted on 04/29/2011 11:53
B P Farrell
Very disappointed...

Not one commenter acknowledged the Merchant.

Hello, STRANGA.
Abe504's Avatar - Comment posted on 04/29/2011 11:53
Abe504
wow, this whole mess is making me contemplate selling my ps3, games are one thing but security is whole different ball game. If hackers still got access to the core system, what more can sony do without a new system.
Rm88's Avatar - Comment posted on 04/29/2011 11:53
Rm88
PS4 will have Friend Codes.
KIDA26's Avatar - Comment posted on 04/29/2011 11:53
KIDA26
So can we even protect ourselves from this potential identity theft at this point? is there anything I can do? I just juhope they aren't going through and selling by last name alphabetical... I would go pretty early as I am a B last name :(
Gene Eric's Avatar - Comment posted on 04/29/2011 11:54
Gene Eric
@Abe504
There's no need to sell it. Just don't use its online component
SayWord's Avatar - Comment posted on 04/29/2011 11:54
SayWord
http://www.psxextreme.com/ps3-news/8976.html this is a link to a site reporting on my earlier post about mastercard and american express. Wonder why jim doesn't post information like this?
Eric Rogers's Avatar - Comment posted on 04/29/2011 11:55
Eric Rogers
I am going to have a heart attack I really am. I stoped being pissed at sony and now I am just scared and panicked. Mainly because I CAN'T CANCEL MY DEBIT CARD!!!! I live in college and it's the only source of income. I can't get another card for 3 months!!!!!!
solomon318's Avatar - Comment posted on 04/29/2011 11:57
solomon318
Maybe if they had CHARGED for their online service like XBL they would have had the damn money to upgrade thier security....apparently "Free" is gonna cost some PS3 owners a WHOLE lot more than they bargained for
Stop Spoilers's Avatar - Comment posted on 04/29/2011 11:59
Stop Spoilers
once again CC info is fucking encrypted stop saying it is not because it is.
Xzyliac's Avatar - Comment posted on 04/29/2011 12:00
Xzyliac
@mrandydixon
Har har har.
SayWord's Avatar - Comment posted on 04/29/2011 12:00
SayWord
@solomon318 yeah that's why the 360 has been hacked since the beginning? Lol
Mr Andy Dixon's Avatar - Comment posted on 04/29/2011 12:00
Mr Andy Dixon
@Xzyliac

:)

Come on, you know you smiled.
Everyday Legend's Avatar - Comment posted on 04/29/2011 12:04
Everyday Legend
@sayword
Yeah. I've had my CC info all over the interwebz because of XBL for five years now. Go take a shower, son. You're done.


@ eric rogers
Just order a new card.
Gene Eric's Avatar - Comment posted on 04/29/2011 12:05
Gene Eric
@Sayword
It was hacked, but not to this level.
mix's Avatar - Comment posted on 04/29/2011 12:05
mix
Mastercard
I just called Mastercard and they are aware of the "PS3" incident but have not seen anything out of the ordinary from anyone's credit cards yet. She said once they do see activity, as they are watching for it, they will begin cancelling cards who has used the PSN. Untill then though they just sit back and pretty much wait she said. Thats what we do at work, if a terminal has been breached and a single card was skimmed, we cancel every card that used that terminal and issue new onces, looks like MasterCard is doing that as well.

I upgraded my card anyways so I get a new card anyways in a few days but this is good news as nothing has happened yet.
indirect's Avatar - Comment posted on 04/29/2011 12:06
indirect
@tylerstravis, anybody else needing this,
If you don't know what credit card you have on file with PSN then search your inbox for an email from DoNotReply@ac.playstation.net. I believe that is your confirmation email.

Would be nice if Sony provided this info.
prev next 50 comments

Comment with Facebook





Click connect and comment instantly!

Comment with Dtoid





New? SIGN UP - it takes 5 seconds

Comments policy

Destructoid is an open discussion community. You don't need to "audition" to post a comment - just speak your mind. We respect differing opinions on the site, so have at it. Be smart, funny, insightful, clueless, or cute -- but back it up with substance. Keep your cool, keep it fun. We only ask that you act respectfully and above all: don't be a troll and ruin it for everyone else. Don't bring down gamers or we'll, you know, gently shoot you in the face and stuff you into a flaming mailbox. Each comment is your opportuntity to make this community awesomer. Is that even a word?

Avoiding the banhammer only requires common sense: spamming, trolling, racism, NSFW stuff, and other forms of sucking will not be tolerated. If anyone is griefing please report abuse. Be good. Don't suck!