Sony Data Breach Expanding in Scope, Important!

Tessil · Last edited by Tessil on Mon Apr 21, 2014 10:42 pm; edited 1 time in total

The Sony data breach is expanding in scope. We heard last week that SOE accounts were not involved, now this appears to be not the case. It's very important you pay attention to what's happening!

Let's face it, Sony has consistently treated their customers with contempt, this is just a logical extension of this.

I recommend that folks read up on events as they are evolving very quickly. One way is to check the front page of the CF website here, where I am reposting bits of relevant information. Remember to click through to read the entire postings (front page is just summaries).

The other way is to check Slashdot's aggregator for Sony news.

This is going to be trouble for all of us. =/

Tessil

Wait, it just got better... I mean, worse:

"Sony responds to Congress: all 77 million PSN accounts compromised,
finger pointed at Anonymous"
www.engadget.com/2011/...compromis/

Here's Kazuo Hirai's Letter to the U.S. House of Representatives:
www.flickr.com/photos/...521862165/

Hirai's letter is interesting reading, especially if you read between the lines.

Even though Sony's answer to the question "Have you identified the indivudual(s) responsible for the breach?" is a unadorned "no", the
implication it's Anonymous (earlier in the letter) is being flogged pretty heavily by the media (as in the Engadget headline above). I don't think Sony realizes they're playing with fire there.

Tessil

More news posted to the front page:

Gene Spafford testifies to Congress regarding poor security at Sony. BTW, Gene Spafford isn't just "some guy," or some security consultant. He's very respected in the security community. If he's talking, I'd listen. Intently.

As predicted, looks like Sony managed to provoke a response from Anonymous.

Tessil

News on the so-called "Welcome Back" program posted on the front page.

Not sure what they'll be doing for our friends from the Great White North, but Sony is offering a year of credit protection. I highly recommend that people take advantage of this offer if you do not have credit protection already (If you do, doubling up likely won't help you any). If you do choose to go with Sony's vendor - make sure they don't set you up for some sort of autopay deal (where it will automatically renew after the free year is up). This would be incredibly sleezy - "credit protection" vendors preying on a captive audience.

If people choose to go another route, I have a really good discount code for LifeLock, guildees who need it, ask me about it.

Check your benefits and such - some banks, credit card companies, etc. offer credit protection services (sometimes bundled with services you're already getting). Make sure you understand what they do and don't protect you against, and whether you're covered at all. Given the scope of the data breach, it's very hard for me to do anything but recommend folks get some sort of credit protection ASAP.