Facts delivered from Sony Press Conference:-A confirmed breach occured with PSN confidential information -Confirmed private data including names, addresses, phone numbers, and passwords were stolen (stored in plaintext) -Unable to prove credit card information was stolen. It was stored encrypted however some users are reporting fradulant charges. I doubt Sony's ability. To store that sensitive information in plaintext was a horrible choice. Sony dropped the ball there completely (horrible handling from a security standpoint). As for the credit card information, if someone was able to decrypt the master key, I'm not at all surprised if the credit card information was cracked as well. Sony is definitely proving they have some horrible security standards.
|