Sony hit with second attack, loses 12,700 Credit Card Numbers

Wagram

Currently Offline

45,924

11832 posts since 26/01/10

Recent Badges:

8 Years Has been a VGChartz member for over 8 years.
Right Tool for the Right Tool Score a total of 25 games in your collection.
Thumbs Up Receive an Upvote on One of Your User Reviews.
12 Years Has been a VGChartz member for over 12 years.
9 Years Has been a VGChartz member for over 9 years.
Hit And Run 15 comments posted on VGChartz news articles.

Wagram on 02 May 2011

NiKKoM said:

Grimes said:

Found more info:

http://www.soe.com/securityupdate/pressrelease.vm

The personal information of the approximately 24.6 million SOE accounts that was illegally obtained, to the extent it had been provided to SOE, is as follows:

name
address
e-mail address
birthdate
gender
phone number
login name
hashed password.

In addition to the information above, the 10,700 direct debit records from accounts in Austria, Germany, Netherlands and Spain, include:

bank account number
customer name
account name
customer address.

hmmm.. that should be enough to make a fake id and to commit identity theft at the bank to access funds...

At my bank they have our pictures on file. So when I access my account they pull a picture of me up to see if it really is. I'm not sure if all banks do that though.

Grimes

Currently Offline

1,902

1529 posts since 24/08/09

Recent Badges:

Mirror Image Awarded for uploading an avatar.
3 Years Has been a VGChartz member for over 3 years.
13 Years Has been a VGChartz member for over 13 years.
1st Birthday Has been a VGChartz member for over 1 year.
4 Years Has been a VGChartz member for over 4 years.
Hit And Run 15 comments posted on VGChartz news articles.

Grimes on 02 May 2011

makingmusic476 said:

This wasn't a second attack. This was part of the first attack, only it wasn't until yesterday that SOE had become aware that they had also been hit.

Also, I'm not sure why people are giving Sony so much shit over this. The attack was so severe the FBI and Homeland Security have gotten involved. You're going to stop buying their products because some really damn good hackers decided Sony was their next target?

From what I've read, the intrusions were through an existing vulnerability that wasn't patched. It may have not taken "damn good hackers" as you call it, but merely criminals who took advantage of poor maintenance.

Anyone can guess. It takes no effort to throw out lots of predictions and have some of them be correct. You are not and wiser or better for having your guesses be right. Even a blind man can hit the bullseye.

kitler53

Currently Offline

68,546

16375 posts since 03/10/07

Recent Badges:

Everything's Falling Into Place Add a total of 100 games to your collection.
It's a Start Bank a Total of 2,000 VG$.
14 Years Has been a VGChartz member for over 14 years.
10 Years Has been a VGChartz member for over 10 years.
Hit And Run 15 comments posted on VGChartz news articles.
3 Years Has been a VGChartz member for over 3 years.

Currently Playing:

Sports Champions (PS3)
Demon's Souls (PS3)

kitler53 on 02 May 2011

so side note ...

i called chase to ask them to cancel my card and give me a new one. chase told me that they have been monitoring my account since the attack was known ... did we know that sony had contacted the banks with the vulnerable accounts?

Kasz216

Currently Offline

117,816

34826 posts since 29/07/07

Recent Badges:

Making Friends 10 friends on gamrConnect.
God Of VGC 10,000 posts on the gamrConnect forums.
One Piece at a Time Add your first game to your collection.
So You Came Back For More, Huh? Logged in a second time.
Pon Received 100 wall post comments on gamrConnect.
Making Progress Earned 50,000 gamrPoints

Kasz216 on 02 May 2011

makingmusic476 said:

This wasn't a second attack. This was part of the first attack, only it wasn't until yesterday that SOE had become aware that they had also been hit.

Also, I'm not sure why people are giving Sony so much shit over this. The attack was so severe the FBI and Homeland Security have gotten involved. You're going to stop buying their products because some really damn good hackers decided Sony was their next target?

The FBI is involved because Sony asked. If you look at what Sony said about the hack, they used a prexisting flaw to hack into the Sony database that Sony didn't keep up on.

http://www.theregister.co.uk/2011/05/01/psn_service_restoration/

That's why.

All the did was use the same technique some other hackers used... because Sony didn't have anyone to stay up to date on security matters. (hence the new position.)

It would be like if Norton Anti-virus sold you their virus protection...

then never updated it. (NAV sucks, but you get the point.)

Kasz216

Currently Offline

117,816

34826 posts since 29/07/07

Recent Badges:

2 Years Has been a VGChartz member for over 2 years.
Pon Received 100 wall post comments on gamrConnect.
A Badge Within A Badge Earned 20 badges.
16 Years Has been a VGChartz member for over 16 years.
10 Years Has been a VGChartz member for over 10 years.
Everything's Falling Into Place Add a total of 100 games to your collection.

Kasz216 on 02 May 2011

kitler53 said:

so side note ...

i called chase to ask them to cancel my card and give me a new one. chase told me that they have been monitoring my account since the attack was known ... did we know that sony had contacted the banks with the vulnerable accounts?

Yes. Though, by "attack was known" I wonder if they mean when PSN went down or when Sony told us.

theprof00

Currently Offline

154,498

31184 posts since 02/04/08

Recent Badges:

Hit And Run 15 comments posted on VGChartz news articles.
One Piece at a Time Add your first game to your collection.
The High Flyer Earned 40 badges.
Dead or Alive Win VG$500 in total.
Quite a Collection of Parts Add a total of 250 games to your collection.
Breaking Out Managed to avoid being banned for 1 year.

theprof00 on 02 May 2011

Grimes said:

makingmusic476 said:

This wasn't a second attack. This was part of the first attack, only it wasn't until yesterday that SOE had become aware that they had also been hit.

Also, I'm not sure why people are giving Sony so much shit over this. The attack was so severe the FBI and Homeland Security have gotten involved. You're going to stop buying their products because some really damn good hackers decided Sony was their next target?

From what I've read, the intrusions were through an existing vulnerability that wasn't patched. It may have not taken "damn good hackers" as you call it, but merely criminals who took advantage of poor maintenance.

An existing vulnerability in the movie mission impossible was a person flying to another building and rapelling down a room's height. to activate a terminal within a 15 minute time frame.

I kid, I kid. Just don't infer anything more from "existing vulnerablity", other than they knew about the vulnerability.

Kasz216

Currently Offline

117,816

34826 posts since 29/07/07

Recent Badges:

Genocidest 25,000 posts on the gamrConnect forums.
7 Years Has been a VGChartz member for over 7 years.
Genocide 5,000 posts on the gamrConnect forums.
'Ello Princess! Awarded for signing up.
Pon Received 100 wall post comments on gamrConnect.
A Badge Within A Badge Earned 20 badges.

Kasz216 on 02 May 2011

theprof00 said:

Grimes said:

makingmusic476 said:

This wasn't a second attack. This was part of the first attack, only it wasn't until yesterday that SOE had become aware that they had also been hit.

Also, I'm not sure why people are giving Sony so much shit over this. The attack was so severe the FBI and Homeland Security have gotten involved. You're going to stop buying their products because some really damn good hackers decided Sony was their next target?

From what I've read, the intrusions were through an existing vulnerability that wasn't patched. It may have not taken "damn good hackers" as you call it, but merely criminals who took advantage of poor maintenance.

An existing vulnerability in the movie mission impossible was a person flying to another building and rapelling down a room's height. to activate a terminal within a 15 minute time frame.

I kid, I kid. Just don't infer anything more from "existing vulnerablity", other than they knew about the vulnerability.

Except they DIDN'T know about the vulernability. Sony specifically said it was a known vulerability that they admitted not knowing about.

In otherwords, Sony was out of the loop of the security community.