Tuesday, November 15, 2011

Sony suspends 93,000 online accounts after break-in attempt

AppId is over the quota
AppId is over the quota
Sony PlayStation Many gamers were angry that Sony took several days to acknowledge and report April's hack. Photograph: Thomas Peter/Reuters

Up to 93,000 accounts have been compromised in a fresh attack on Sony's online servers, following an attack earlier this year that saw the company's PlayStation Network taken offline.

According to the official PlayStation blog, attempts were made to access data held on the Sony Entertainment Network, PlayStation Network and Sony Online Entertainment services using a "massive" set of sign-in IDs and passwords.

The company's chief information security officer, Philip Reitinger, said in a statement on the blog that a majority of the passwords did not work and that customer credit card information was not at risk. The company has temporarily suspended 93,000 accounts.

Reitinger was quick to shift responsibility for the break-in to third-party sites or servers. "These attempts appear to include a large amount of data obtained from one or more compromised lists from other companies, sites or other sources," he said.

"In this case, given that the data tested against our network consisted of sign-in ID-password pairs, and that the overwhelming majority of the pairs resulted in failed matching attempts, it is likely the data came from another source and not from our networks. We have taken steps to mitigate the activity."

In April, Sony was forced to take its PlayStation Network service offline for several weeks after a hacking attack accessed the account details of up to 70 million PS3 owners.

The chief executive, Howard Stringer, offered a personal apology to gamers after the scandal, but many were angry that Sony's security was compromised so extensively and that it took the company several days to acknowledge and report that a hack had taken place. A month later, the hacking group Lulzsec claimed to have obtained the personal information of more than 1 million users from Sony Pictures websites.

On this occasion, Sony appears to have notified customers almost immediately, and this is a much smaller, less sophisticated intrusion. Reitinger claimed that accounts compromised in the latest attack would be monitored for unauthorised access and that affected customers would be emailed and asked to change their log-in details. The accounts have currently been disabled.

Reitinger, a former US homeland security official who was installed as Sony's information security chief in the wake of the April hacking controversy, ended his statement by reminding customers to choose unique, hard-to-guess passwords and "always look for unusual activity in your account".


View the original article here

No comments:

Post a Comment