Quick Jump Daily Digest

Thank you for your interest in the Quick Jump Daily Digest. Get notified of all new content on QJ in our free Daily Digest. To subscribe, enter your email address below and click the subscribe button.


Email Address:


Email will come from "donotreply@caputomedia.com". Please whitelist this email address.

Cancel and Return to page

SCEE Pays Big For 2011 Security Breach

Posted Jan 24, 2013 at 12:00PM EST by Christopher Groux

Listed in: News Tags: anonymous, hack, ico, psn, Sony
Ó

 

April 2011 was a tough time to be a Sony fan. During that month, the PlayStation Network was down for an astounding twenty-eight full days after a major security breach had been made by a hacktivist group called Anonymous. After giving us all a couple free games and identity theft protection in response for the outage, it seemed that all of the trouble was over, but if this fine is anything to go by, it seems SCEE might have to be ready to pay big.

 

 

In the UK, there is a legislative body known as the Information Commissioner's Office (ICO) and it is their main job to make sure that everybody's privacy and data rights are protected both on the web and in the real world. Obviously then, when the PlayStation brand supposedly exposed the personal information of its millions of users a few years back, they're going to have a problem with those kinds of dealings. In their own words, SCEE "let everybody down" because customers believed their servers were secure when in fact it didn't take groups too long to probe their way in.

 

 

 

 

Kaz Hirai

 

 

 

As a response to these millions of accounts being leaked into the wrong hands, the ICO is looking for Sony's European division to pay up hugely for their mistakes in the form of 250,000 pounds. For those of you not so great at conversions, that equals about $332,500. While that's quite the price to pay, the ICO does say that they are trying to be forgiving because the hack was an unpredictable criminal attack in which no credit data was actually lost. Still, that doesn't mean Sony hasn't already done everything they can to fight this new ruling.

 

 

Do you think Sony should be paying for these kinds of errors?

 

 

Source



42.9% of voters think this story ROCKS!
Vote Now!    This story ROCKS! (3) This story SUCKS!! (4)




Become a Member of QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
  • Logged in members can sign up for nightly updates.
  • Logged in members can create Profiles to be seen by other users.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link at the top right!

Comments 


 
+1 # RE: SCEE Pays Big For 2011 Security BreachChristopher Groux 2013-01-24 14:52
I don't know if I agree with this. Sony definitely did wrong to consumers by letting this happen, but at the same time it's a bit hard to punish them so heavily when no piece of software can ever be 100% secure from hackers. Would they punish Apple or MS for every virus that gets made?

Reply
 

 
-2 # RE: RE: SCEE Pays Big For 2011 Security BreachAces In The Palm 2013-01-24 16:25
credit card info was the only thing encrypted, every username, password and email addy was not crypted, so yes they do deserve it

Reply
 

 
# RE: RE: RE: SCEE Pays Big For 2011 Security Breach1312ojmwdsadsa 2013-01-24 17:05
Citation that information was actually taken and that it wasn't encrypted?

Reply
 

 
+2 # RE: RE: RE: RE: SCEE Pays Big For 2011 Security BreachAces In The Palm 2013-01-25 06:03
Quoting 1312ojmwdsadsa:
Citation that information was actually taken and that it wasn't encrypted?

it's common knowledge, i thought.
http://en.wikipedia.org/wiki/PlayStation_Network_outage

Unencrypted personal details

Credit card data was encrypted, but Sony admitted that other user information was not encrypted at the time of the intrusion.[44][57] The Daily Telegraph reported that "If the provider stores passwords unencrypted, then it's very easy for somebody else – not just an external attacker, but members of staff or contractors working on Sony's site – to get access and discover those passwords, potentially using them for nefarious means."[58] On May 2, Sony clarified the "unencrypted" status of users' passwords, stating that:[59]

While the passwords that were stored were not “encrypted,” they were transformed using a cryptographic hash function. There is a difference between these two types of security measures which is why we said the passwords had not been encrypted. But I want to be very clear that the passwords were not stored in our database in cleartext form.

Reply
 

 
+1 # RE: RE: RE: RE: RE: SCEE Pays Big For 2011 Security BreachAces In The Palm 2013-01-25 06:07
and

Sony Pictures Entertainment website hacking

The Sony website SonyPictures.com was hacked on 2 June 2011. Unencrypted passwords and personal information of Sony customers within the website's database were stolen.[68]

Reply
 

 
+2 # Government paydayFadeese 2013-01-24 15:23
The big issue to me is "Where does this money go?" I doubt it is going to the people that had their information leaked. It sounds like just a government payday. I don't see how a regulatory commitee has any true pull here. If Sony had purposefully misused the info or sold it off that would be different.

It's like being fined by the cops cause someone broke into your house...

In the IT world, you know that there are going to be break ins. No system is 100% secure if connected to the outside world.

Reply
 

 
# RE: Government paydayAkaiEdge 2013-01-25 04:34
That analogy isn't correct.
It's more like someone breaking into a safe, where everyone entrusted you to keep their precious items safe because they believe you can protect it.

Also, I think the security could be good enough to stop these hackers, if they had their own staff try to hack into their own security and patched it up where the holes are.

Alas, Sony doesn't charge for its online service(excludi ng the optional PS+) and might not have enough money to pay their employees to do this every month+.

Reply
 

 
# RE: RE: Government paydayChristopher Groux 2013-01-25 18:41
It's possible, but even you are speculating here. We don't really know enough of EXACTLY what went down to prove that. Sony has money from other revenue streams, so I wouldn't say being free would be the cause for this. How do you know they don't have teams that do this regardless?

Reply
 

 
# RE: RE: RE: Government paydayAkaiEdge 2013-01-25 19:09
That's why I said "might".

Also, even though they have money from other sources, they might have figured it not important enough to spend money from those on their security for PS related things.

Of course as you said, this is speculation unless you work for Sony in a higher up position, or as an employee who manages security(I wouldn't work for Sony, if a job from them fell on me, just to find out though...)

Reply
 

 
# RE: RE: RE: RE: Government paydayChristopher Groux 2013-01-26 14:42
Not even trying to be nudge either here. I'm inclined to agree with you that internet security probably wasn't something they put a ton of focus on, but because we can't be totally sure if that's true I'm not sure they should be paying so big.

Reply
 

 
+2 # RE: SCEE Pays Big For 2011 Security BreachEquin0x 2013-01-24 18:39
SO it's Sonys fault some dickweeds felt like hacking them. What if the US government was hacked? Would they pay the US Citizens if nothing was taken?

Reply
 

 
# RE: RE: SCEE Pays Big For 2011 Security BreachChristopher Groux 2013-01-24 18:49
Agree with all of you. I'm not sure what was actually taken all I can see is "personal info" which I guess isn't the best thing even if its just usernames. What the ICO is saying is Sony could have prevented this if they kept up to date. That may or may not be true i my opinion. I also wonder here all that money is going too...

Reply
 

 
# ...ptspyder 2013-01-24 19:40
The money is going where it always ends up going when the government takes it away from people. It will be taken away by rich white men and then be used exclusively to continue and expand their power over the population.

Reply
 

 
# RE: ...Christopher Groux 2013-01-25 00:12
That answer was probably the most ideologically-grounded comment ever on this site. Is it wrong? I'm not so sure. :P

Reply
 

 
# RE: SCEE Pays Big For 2011 Security Breachreally 2013-01-27 16:47
if it was ANO they are a group of hackers that are so good they can hack anything. i think they said they are 10 steps ahead of any group or law an government etc far as hacking. so if they are what they say they are its not safe on nothing period.

it was more than 1 reason why psn got hacked,geohot an linux was the reason i think the top reason why PSN got hacked. who help the hack also people that was spamming text u know send this to 50 friends an get 50$ on the psn put this code in to get COD maps. crazy thing i know better but u have alot wtf people online. guess what people are still doing it fake rewards 50$ come on 50$ times 2million sony would loose money

Reply
 

Add comment

Security code
Refresh


Welcome to QJ.Net!

If you want your comments to go live without waiting for moderation, you need to be logged in. Being logged in has its benefits:
  • Logged in members do not wait for their comments to be approved.
  • Logged in members can create Profiles to be seen by other users.
So why wait? Create an account or login now! It's easy, quick, and free.

To get started, use the LOGIN boxes, or the REGISTER link below!



Want to learn more about the team who brings you the QJ news?

Read about them now!


RSS Feeds Follow us on Twitter Find us on Facebook
Login:

HOT FLASH GAMES

Monster Truck Jumper

Left to Die

The Empire 2

Dark Dimension

Town Drift Competition

Heroes of the Sword