News from Sony is not good this morning after they admit to losing credit card numbers and detail the extent of how many accounts may have been effected by another revelation that the security breach extends beyond the Playstation Network and out to Sony Online Entertainment.

Approximately 12,700 non-US credit and debit card information was stolen from outdated databases in 2007, along with 10,700 debit records in other countries such as Australia and Germany.

“The information from the outdated database that may have been stolen includes approximately 12,700 non-U.S. credit or debit card numbers and expiration dates (but not credit card security codes), and about 10,700 direct debit records of certain customers in Austria, Germany, Netherlands and Spain.” – Sony Online Entertainment Press Release

Not stopping there with details Sony further went on to release a statement regarding how many SOE accounts may have been breached as a result of the April 16-17 security intrusion.

“The personal information of the approximately 24.6 million SOE accounts that was illegally obtained, to the extent it had been provided to SOE, is as follows:

· name

· address

· e-mail address

· birthdate

· gender

· phone number

· login name

· hashed password

In addition to the information above, the 10,700 direct debit records from accounts in Austria, Germany, Netherlands and Spain, include:

· bank account number

· customer name

· account name

· customer address” – Sony Entertainment Online Press Release

Sony did say that this was not a new attack and that the issues with the Playstation Network and this newly founded second security breach happened at the same time in April.

Over the weekend Sony issued an apology to it’s Playstation Network users and has offered a “Welcome Back” program and stated that they will handle credit card theft issues case by case.

via Joystiq

Tweet This Post

View the full article

............................................________

....................................,.-'"...................``~.,

.............................,.-"..................................."-.,

.........................,/...............................................":,

.....................,?......................................................\,

.................../...........................................................,}

................./......................................................,:`^`..}

.............../...................................................,:"........./

..............?.....__.........................................:`.........../

............./__.(....."~-,_..............................,:`........../

.........../(_...."~,_........"~,_....................,:`........_/

..........{.._$;_......"=,_......."-,_.......,.-~-,},.~";/....}

...........((.....*~_......."=-._......";,,./`..../"............../

...,,,___.\`~,......"~.,....................`.....}............../

............(....`=-,,.......`........................(......;_,,-"

............/.`~,......`-...............................\....../\

.............\`~.*-,.....................................|,./.....\,__

,,_..........}.>-._\...................................|..............`=~-,

.....`=~-,_\_......`\,.................................\

...................`=~-,,.\,...............................\

................................`:,,...........................`\..............__

.....................................`=-,...................,%`>--==``

........................................_\..........._,-%.......`\

...................................,<`.._|_,-&``................`

I got this email and realize that they are now saying hashed passwords. That's at least some good news in all the bad.