incident · 1302998400000

Sony PlayStation Network Data Breach

Hackers breached the Sony PlayStation Network, compromising the personal information of approximately 77 million users and forcing a 24-day global service outage.

What happened

Between April 17 and 19, 2011, an unauthorized intrusion compromised the PlayStation Network and Qriocity services. Attackers accessed names, addresses, email addresses, birthdates, and PSN passwords for 77 million accounts.

Technical mechanism

Attackers exploited vulnerabilities in Sony's network infrastructure to gain unauthorized access to user databases. Sony subsequently rebuilt its system to enhance security.

Why it matters

The PSN breach was one of the largest and most public data exposures in history, causing immense reputational and financial damage to Sony and highlighting the vulnerabilities of massive online gaming networks.

Impact

Sony suffered a 24-day outage of the PSN, estimated costs of $171 million, and severe reputational damage. Millions of users were exposed to potential identity theft.

Response

Sony deactivated the PSN on April 20, hired outside security firms, rebuilt its network infrastructure, and offered users free credit monitoring and identity theft protection.

Defensive lessons

  • Massive consumer databases require robust, multi-layered security architectures.
  • Incident response plans must include timely and transparent customer communication.
  • Network segmentation is crucial to prevent lateral movement to sensitive databases.

Evidence register

  1. PlayStation Blog — Update on PlayStation Network and Qriocity (verified)