Theres is other thing that can be use for sure. The student card can be trace back, passport ect. Here you cant get a credit card without providing 2 of those type of sources. It still leaves place for ID theft, but not with the information that store in Sonys database. Its no wander we dont ask companies to encrypt the name, adress and date of birth of their customer. That doesnt excuse Sony if there was negligence though.
Well thats good. Glad for the Canadians at the least. Hopefully the USA will get a wake up call and either put more stringent requirments on credit cards, or on personal data storage. I suspect it won't happen, but it could.