Sony Computer Entertainment has just come out and said it: it thinks it's possible that all of your private data may have been obtained.
In a recent PlayStation Blog update, Sony says that while its "still investigating the details of this incident" it believes that an "unauthorized person" may have obtained your private information. By "information," it means basically everything: your name, address, country, email address, birthday, and your login and password. Also possible: this person has your credit card information if you provided your data through PlayStation Network or Qriocity.
"Out of an abundance of caution we are advising you that your credit card number (excluding security code) and expiration date may have been obtained," writes Sony's Patrick Seybold.
Finally, it's repeated that Sony is "working day and night" to make sure that both PSN and Qriocity services are back online. It expects "some services" to be restored this week. Considering the breach, I think playing Killzone 3 or Call of Duty: Black Ops online should be the least of your concerns, though.
For more details, follow the link below to the PlayStation Blog, which also provides contact information that might help you protect your privacy.
Update on PlayStation Network and Qriocity [PlayStation Blog]