Jump to content

2011 PlayStation Network outage: Difference between revisions

From Wikipedia, the free encyclopedia
Browse history interactively
← Previous editNext edit →
Content deleted Content added
VisualWikitext
Removed {{Current}}, intended for articles edited by many on the same day. Template:Current#Guidelines.
Shardok (talk | contribs)
156 edits
m Undid revision 428510623 by Yellowdesk (talk) See Talk: Current tag Stays.
Line 1: Line 1:
{{pp-semi-indef}}
{{pp-semi-indef}}
{{pp-move-indef}}
{{pp-move-indef}}
{{current}}
{{cleanup|date=May 2011}}
{{cleanup|date=May 2011}}
The '''2011 PlayStation Network outage''' is the result of an "[[Hacker (computer security)|external intrusion]]" on Sony's [[PlayStation Network]] and [[Qriocity]] services, which resulted in the theft of personal details from approximately 77 million accounts, as well as the suspension of all services worldwide.<ref name="PSN News Update 260411">{{cite news|url=http://uk.playstation.com/psn/news/articles/detail/item369506/PSN-Qriocity-Service-Update/}}</ref><ref name="BBC 26042011">{{cite web|url=http://www.bbc.co.uk/news/technology-13192359 |title=BBC News - Sony faces legal action over attack on PlayStation network |publisher=Bbc.co.uk |date= |accessdate=2011-04-29}}</ref><ref name="Telegraph 26042011">{{cite web|last=Richmond |first=Shane |url=http://www.telegraph.co.uk/technology/news/8475728/Millions-of-internet-users-hit-by-massive-Sony-PlayStation-data-theft.html |title=Millions of internet users hit by massive Sony PlayStation data theft |publisher=Telegraph |date= |accessdate=2011-04-29}}</ref><ref name="Australian 27042011">{{cite web|url=http://www.theaustralian.com.au/australian-it/exec-tech/playstation-users-in-australia-urged-to-check-credit-card-activity/story-e6frgazf-1226045582897 |title=PlayStation users in Australia urged to check credit card activity |publisher=The Australian |date= |accessdate=2011-04-29}}</ref> The attack occurred between April 17, 2011 and April 19, 2011.<ref name="PSN News Update 260411" /> On May 4, 2011, Sony confirmed that individual pieces of [[personally identifiable information]] from each of the 77 million accounts appeared to have been stolen.<ref>{{cite web|url=http://www.flickr.com/photos/playstationblog/sets/72157626521862165/ |title=Kazuo Hirai's Letter to the U.S. House of Representatives - a set on Flickr |publisher=Flickr.com |quote="Information appears to have been stolen from all PlayStation Network user accounts, although not every piece of information in those accounts appears to have been stolen","The criminal intruders stole personal information from all of the approximately 77 million PlayStation Network and Qriocity service accounts." |date= |accessdate=2011-05-05}}</ref>
The '''2011 PlayStation Network outage''' is the result of an "[[Hacker (computer security)|external intrusion]]" on Sony's [[PlayStation Network]] and [[Qriocity]] services, which resulted in the theft of personal details from approximately 77 million accounts, as well as the suspension of all services worldwide.<ref name="PSN News Update 260411">{{cite news|url=http://uk.playstation.com/psn/news/articles/detail/item369506/PSN-Qriocity-Service-Update/}}</ref><ref name="BBC 26042011">{{cite web|url=http://www.bbc.co.uk/news/technology-13192359 |title=BBC News - Sony faces legal action over attack on PlayStation network |publisher=Bbc.co.uk |date= |accessdate=2011-04-29}}</ref><ref name="Telegraph 26042011">{{cite web|last=Richmond |first=Shane |url=http://www.telegraph.co.uk/technology/news/8475728/Millions-of-internet-users-hit-by-massive-Sony-PlayStation-data-theft.html |title=Millions of internet users hit by massive Sony PlayStation data theft |publisher=Telegraph |date= |accessdate=2011-04-29}}</ref><ref name="Australian 27042011">{{cite web|url=http://www.theaustralian.com.au/australian-it/exec-tech/playstation-users-in-australia-urged-to-check-credit-card-activity/story-e6frgazf-1226045582897 |title=PlayStation users in Australia urged to check credit card activity |publisher=The Australian |date= |accessdate=2011-04-29}}</ref> The attack occurred between April 17, 2011 and April 19, 2011.<ref name="PSN News Update 260411" /> On May 4, 2011, Sony confirmed that individual pieces of [[personally identifiable information]] from each of the 77 million accounts appeared to have been stolen.<ref>{{cite web|url=http://www.flickr.com/photos/playstationblog/sets/72157626521862165/ |title=Kazuo Hirai's Letter to the U.S. House of Representatives - a set on Flickr |publisher=Flickr.com |quote="Information appears to have been stolen from all PlayStation Network user accounts, although not every piece of information in those accounts appears to have been stolen","The criminal intruders stole personal information from all of the approximately 77 million PlayStation Network and Qriocity service accounts." |date= |accessdate=2011-05-05}}</ref>

Revision as of 05:43, 11 May 2011

The 2011 PlayStation Network outage is the result of an "external intrusion" on Sony's PlayStation Network and Qriocity services, which resulted in the theft of personal details from approximately 77 million accounts, as well as the suspension of all services worldwide.[1][2][3][4] The attack occurred between April 17, 2011 and April 19, 2011.[1] On May 4, 2011, Sony confirmed that individual pieces of personally identifiable information from each of the 77 million accounts appeared to have been stolen.[5]

At the time of the outage, with a count of 77 million PlayStation Network registered accounts,[6] data theft of personally identifiable information would make it one of the largest data security breaches in history.[7][8] This would surpass the TJX Hack in 2007 which affected 45 million customers.[9] Government officials in various countries have voiced concern at failing to protect customers' personal details and Sony's belated warning that users details could have been obtained in the security breach — nearly a week after the initial external intrusion.

Sony turned off the PlayStation Network on April 20, 2011 following the intrusion a few days earlier. Sony stated on April 26 that they were attempting to get online services running again "within a week",[10][11] however PlayStation Network and Qriocity services are still offline as of May 10, 2011.[12] Shigenori Yoshida, the spokesperson for Sony Japan, said that the PlayStation Network and Qriocity services may not be available fully until May 31, 2011.[13]

Timeline of the outage

On April 20, 2011, Sony acknowledged on the official PlayStation Blog that they were "aware certain functions of the PlayStation Network" were down. Upon attempting to sign in to the PlayStation Network via the PlayStation 3, users would receive the message indicating that the PlayStation Network was "undergoing maintenance".[14] The following day, Sony asked its customers for patience while the cause of downtime was being investigated and stated that it may take "a full day or two" to get the service fully functional again.[15]

The company later explained that an "external intrusion" had affected the PlayStation Network and Qriocity services.[16] This intrusion had occurred between April 17 and April 19. On April 20, Sony had suspended all PlayStation Network and Qriocity services worldwide, causing the outage.[17] Sony expressed their regrets for the downtime and called the task of re-building the system time consuming. This, however, would lead to a stronger network infrastructue and additional security.[18] On April 25, Sony's Senior Director of Corporate Communications & Social Media, Patrick Seybold, reiterated on the PlayStation Blog that fixing and enhancing the network was a "time intensive" process with no currently available ETA.[19] However, the next day Sony stated that there was a "clear path to have PlayStation Network and Qriocity systems back online", with some services expected to be restored within a week. Furthermore, Sony stated that there had been a "compromise of personal information as a result of an illegal intrusion on our systems."[20]

On May 1, 2011, Sony announced a "Welcome Back" program for customers affected by the outage. The company also confirmed that some PSN and Qriocity services would be available during the first week of May.[21][22] The list of services expected to become available included:[23]

  • Restoration of Online game-play across the PlayStation 3 (PS3) and PSP (PlayStation Portable) systems
  • This includes titles requiring online verification and downloaded games
  • Access to Music Unlimited powered by Qriocity for PS3/PSP for existing subscribers
  • Access to account management and password reset
  • Access to download un-expired Movie Rentals on PS3, PSP and MediaGo
  • PlayStation Home
  • Friends List
  • Chat Functionality

On May 2, 2011, Sony issued a press release, according to which the Sony Online Entertainment services had been taken offline for maintenance due to potentially related activities during the initial criminal hack that caused the PlayStation Network outage. Over 12,000 credit card numbers from non-U.S. cardholders and additional information from 24.7 million SOE accounts may have been stolen.[24][25]

During the week, Sony sent a written letter to the US House of Representatives, answering questions and concerns about the event.[26] In the letter Sony announced that they would be providing Identity Theft insurance polices in the amount of $1 million USD per user of the PlayStation Network and Qriocity services despite no reports of credit card fraud being indicated. This was later confirmed on the PlayStation Blog, where it was announced that the service, AllClear ID Plus powered by Debix, would available to users in the United States free for 12 months, and is to include internet surveillance, complete identity repair in the event of theft and a $1 million ID theft insurance policy for each user. [27][28]

On May 6, 2011, Sony stated they had begun "final stages of internal testing" for the PlayStation Network, which had been rebuilt.[29] However, the following day Sony reported that they would not be able to bring PSN services back online within the one-week timeframe given on May 1, because "the extent of the attack on Sony Online Entertainment servers" had not been known at the time.[30] Sony Online Entertainment confirmed by means of their Twitter account that their games would not be available until some undisclosed time after the weekend.[31]

At the same time, reports from Reuters began reporting the event as the "the biggest Internet security break-in ever"[32] with more direct answers from the Corporation in which a Sony spokesperson said:[33]

  • Sony had removed the personal details of 2,500 people stolen by hackers and posted on a website
  • The data included names and some addresses, which were in a database created in 2001
  • No date had been fixed for the restart

Sony response

US House of Representatives

Sony reported on the May 4, 2011, to the PlayStation Blog[34] that:

Kazuo Hirai, Chairman of the Board of Directors of Sony Computer Entertainment America, submitted written answers to questions posed by the United States House subcommittee about the large-scale, criminal cyber-attack we have experienced.

Sony relayed during the letters that:

In summary, we told the subcommittee that in dealing with this cyber attack we followed four key principles:

  1. Act with care and caution.
  2. Provide relevant information to the public when it has been verified.
  3. Take responsibility for our obligations to our customers.
  4. Work with law enforcement authorities.


We also informed the subcommittee of the following:

  • Sony has been the victim of a very carefully planned, very professional, highly sophisticated criminal cyber attack.
  • We discovered that the intruders had planted a file on one of our Sony Online Entertainment servers named “Anonymous” with the words “We are Legion.”
  • By April 25, forensic teams were able to confirm the scope of the personal data they believed had been taken, and could not rule out whether credit card information had been accessed. On April 26, we notified customers of those facts.
  • As of today, the major credit card companies have not reported any fraudulent transactions that they believe are the direct result of this cyber attack.
  • Protecting individuals’ personal data is the highest priority and ensuring that the Internet can be made secure for commerce is also essential. Worldwide, countries and businesses will have to come together to ensure the safety of commerce over the Internet and find ways to combat cybercrime and cyber terrorism.
  • We are taking a number of steps to prevent future breaches, including enhanced levels of data protection and encryption; enhanced ability to detect software intrusions, unauthorized access and unusual activity patterns; additional firewalls; establishment of a new data center in an undisclosed location with increased security; and the naming of a new Chief Information Security Officer.

Explanation of delays

Sony's explained on the PlayStation Blog why Sony took so long to inform PSN users of the data theft:[35]

There’s a difference in timing between when we identified there was an intrusion and when we learned of consumers’ data being compromised. We learned there was an intrusion April 19th and subsequently shut the services down. We then brought in outside experts to help us learn how the intrusion occurred and to conduct an investigation to determine the nature and scope of the incident. It was necessary to conduct several days of forensic analysis, and it took our experts until yesterday to understand the scope of the breach. We then shared that information with our consumers and announced it publicly this afternoon.

Sony investigation

Possible data theft meant Sony provided an update in regards to a criminal investigation in a blog posted on April 27, 2011: We are currently working with law enforcement on this matter as well as a recognized technology security firm to conduct a complete investigation. This malicious attack against our system and against our customers is a criminal act and we are proceeding aggressively to find those responsible.[36]

On the 30 April 2011, Sony Computer Entertainment CEO Kaz Hirai reiterated this and said the "external intrusion" which should down the PlayStation Network constituted a "criminal cyber attack".[37] Hirai expanded further claiming that Sony systems had been under attack prior to the PlayStation Network outage "for the past month and half" suggesting a concerted attempt to target Sony.[38]

On May 4, 2011 Sony announced that they were adding another company to the investigation team. Data Forte will join Guidance Software and Protiviti in analysing the attacks. Legal aspects of the case will be handled by law firm Baker & McKenzie.[39][40]

Upon learning that a breach had occurred to the PlayStation Network, Sony launched an internal investigation. Sony reported to their letter to the United States Congress that:

One of our first calls was to the FBI, and this is an active, on-going investigation.[41]

Additional details were provided as follows:

Have you identified how the breach occurred?



Yes, we believe so. Sony Network Entertainment America is continuing its investigation into this criminal intrusion, and more detailed information could be discovered during this process. We are reluctant to make full details publicly available because the information is the subject of an on-going criminal investigation and also the information could be used to exploit vulnerabilities in systems other than Sony's that have similar architecture to the PlayStation Network.

Inability to use PlayStation 3 content

While remaining offline, the PlayStation 3 was unable to play certain Capcom titles that were downloaded from the PlayStation Store.[42] Streaming video providers throughout different regions such as Hulu, Vudu, Netflix and LoveFilm are noted to be inaccessible displaying the same maintenance message, although some users have claimed to have been able to still use Netflix's streaming service.[43]

Criticism of Sony's handling of the incident

Original model of the Playstation 3.

Delayed warning of possible data theft

On April 26, 2011, nearly a week after the Network was temporarily disabled, Sony confirmed that it "cannot rule out the possibility"[44] that personally identifiable information such as PlayStation Network account username, password, home address, and email address had been compromised. Sony also mentioned the possibility of credit card data being obtained after claiming that encryption had been placed on the databases, which would partially satisfy PCI Compliance for storing credit card information on a server.

Subsequent to the announcement in both the official blog and by e-mail, PlayStation Network users were asked to safeguard credit card transactions by checking bank statements. This warning came nearly a week after the initial "external intrusion" and when the Network was turned off.[45]

Some disputed this explanation and queried that if Sony deemed the situation so severe that they had to turn off the PlayStation Network on April 20, 2011, Sony should have subsequently warned users of possible data theft rather than on April 26, 2011.[46] Concerns have been raised over both violations of PCI Compliance and failure to notify users immediately following breach of security involving financial information and credit card data. US Senator Richard Blumenthal wrote to Sony Computer Entertainment America CEO Jack Tretton questioning Sony why it took so long to inform users that personal details could have been obtained through unauthorized means.[47]

Sony stated in their letter to the subcommittee:

Your statement indicated you have no evidence at this time that credit card information was obtained, yet you cannot rule out this possibility. Please explain why you do not believe credit card information was obtained and why you cannot determine if the data was in fact taken.



As stated above, Sony Network Entertainment America has not been able to conclude with certainty through the forensic analysis done to date that credit card information was not transferred from the PlayStation Network system. We know that for other personal information contained in the account database, the hacker made queries to the database, and the external forensics teams have seen large amounts of data transferred in response to those queries. Our forensics teams have not seen the queries and corresponding data transfers of the credit card information.

Unencrypted personal details

Credit card data was encrypted, but Sony admitted that other user information was not encrypted at the time of the intrusion.[48][49] The Daily Telegraph reported that "If the provider stores passwords unencrypted, then it's very easy for somebody else – not just an external attacker, but members of staff or contractors working on Sony's site – to get access and discover those passwords, potentially using them for nefarious means."[50] On May 2 Sony clarified the "unencrypted" status of users' passwords, stating that:[51]

While the passwords that were stored were not “encrypted,” they were transformed using a cryptographic hash function. There is a difference between these two types of security measures which is why we said the passwords had not been encrypted. But I want to be very clear that the passwords were not stored in our database in cleartext form.

Sony Online Entertainment outage

On May 3, 2011, Sony stated in a press release that there may be a correlation between the same attack that had occurred on April 16, 2011, towards the PlayStation Network which resulted in the Sony Online Entertainment servers being compromised and taken offline on the previous day.[24] This portion of the attack resulted in the theft of information on 24.6 million Sony Online Entertainment account holders. The database contained 12,700 credit card numbers, particularly those of non-U.S. cardholders, and had not been in use since 2007 as much of the data contained within applies to expired cards and accounts that have been deleted. Sony updated this information the following day by stating that only 900 cards on the database were still live.[52] The discovery of this attack resulted in the suspension of Sony Online Entertainment servers as well as SOE Facebook games. Sony Online Entertainment has already stated that they plan to grant 30 days of free time, plus a day for each day the server is down, to users of Clone Wars Adventures, DC Universe Online, EverQuest, EverQuest II, EverQuest Online Adventures, Free Realms, Pirates of the Burning Sea, PlanetSide, Poxnora, Star Wars Galaxies, and Vanguard: Saga of Heroes, as well as other forms of compensation for all other Sony Online games.[53][54][55]

Security experts Eugene Lapidous of AnchorFree, Chester Wisniewski of Sophos Canada and Avner Levin of Ryerson University criticized Sony, questioning its methods of securing and storing user data. Lapidous called the breach "difficult to excuse" and Wisniewski called it "an act of hubris or simply gross incompetence".[56][57][58][59]

Reaction

Sony Compensation to users for disruption

Sony has stated that they will be hosting special events after the PlayStation Network is brought back online. Sony has also stated they have plans for PS3 versions of DC Universe Online and Free Realms to help alleviate some of their losses. Sony is currently evaluating ways to show their appreciation towards their users who do not play MMOGs for their patience with them during the outage.[60] In a press conference in Tokyo on May 1, Sony announced a "Welcome Back" program for users when the service is restored. As well as "selected PlayStation entertainment content" the program promises to include 30 days free membership of PlayStation Plus for all PSN members, existing PlayStation Plus members will receive an additional 30 days added to their subscription, Qriocity subscribers also receive 30 days. Sony also promised other content and services over the coming weeks.[22]

Hulu has also given notice that they will be compensating PlayStation 3 users for the inability to use their service during the outage. They are offering one week of service compensatory to all Hulu Plus members.[61]

Government reaction

The revealing of possible data theft concerned authorities around the world. The Daily Telegraph reports Graham Cluley, senior technology consultant at Sophos, as saying: "This certainly ranks as one of the biggest data losses ever to affect individuals."[62] The British Information Commissioner's Office confirmed Sony will be questioned,[63] and an investigation will take place to discover if Sony had taken adequate precautions to protect customer details.[64] If found in breach of the UK's Data Protection Act, Sony could face fines of up to £500,000. [63] The Privacy Commissioner of Canada, Jennifer Stoddart confirmed that the Canadian authorities would investigate the incident, and the Commissioner's office conveyed their concern as to why the authorities in Canada weren't informed of a security breach earlier.[65] US Senator Richard Blumenthal of Connecticut demanded answers from Sony about the data breach[66] by emailing SECA CEO Jack Tretton arguing about the delay in informing its customers and insisting that Sony do more for its customers than just offer free credit reporting services. Senator Blumenthal later called for an investigation of the breach to be launched by the US Department of Justice to find the person or persons responsible for the breach and to determine if Sony may be liable for the way that it handled the situation.[67] Congresswoman Mary Bono Mack and Congressman G. K. Butterfield sent a letter to Sony, demanding information on when the breach was discovered and how the crisis will be handled.[68] Sony had been asked to testify before a congressional hearing on security and to answer questions about the breach of security on May 2, 2011 but sent a letter response instead which answered the subcommittee's questions.

A lawsuit was posted on April 27, 2011, by Kristopher Johns from Birmingham, Alabama on behalf of all PlayStation users alleging Sony "failed to encrypt data and establish adequate firewalls to handle a server intrusion contingency, failed to provide prompt and adequate warnings of security breaches, and unreasonably delayed in bringing the PSN service back online."[69][70] According to the complaint filed in the lawsuit, Sony has failed to notify members of a possible security breach and storing members' credit card information,[71] a violation of PCI Compliance—the digital security standard for the Payment Card Industry.

Another lawsuit was filed in Canada by Natasha Maksimovic and claims damages up to C$1 billion which includes free credit monitoring and identity theft insurance.[72] It was filed against Sony USA, Sony Canada and Sony Japan. The plaintiff in the case is quoted as saying: "If you can't trust a huge multi-national corporation like Sony to protect your private information, who can you trust? It appears to me that Sony focuses more on protecting its games than its PlayStation users".[73]

Credit card fraud

As of May 2011, there have been no verifiable reports of credit card fraud related to the PlayStation Network outage. There have been reports from the Internet that some PlayStation users have experienced credit card fraud,[74][75][76] however these reported fraud cases have yet to be linked to the incident. Users who have registered a credit card for use only with Sony have also reported credit card fraud.[77] Sony has claimed that the CVS codes requested by their services were not stored,[78] but it has been suggested that the hackers may have been able to decrypt or record credit card details whilst inside Sony's network.[74]

Sony stated in their letter to the subcommittee:

How many PlayStation Network account holders provided credit card information to Sony Computer Entertainment?



Globally, approximately 12.3 million account holders had credit card information on file on the PlayStation Network system. In the United States, approximately 5.6 million account holders had credit card information on file on the system. These numbers include active and expired credit cards.

As of today, the major credit card companies have not reported that they have seen any increase in the number of fraudulent credit card transactions as a result of the attack, and they have not reported to us any fraudulent transactions that they believe are a direct result of the intrusions described above.

On May 5, a letter from United States Sony Corporation of America CEO and President Sir Howard Stringer further emphasized there had been no evidence of credit card fraud and that a $1 million dollar identity theft insurance policy would be available to PSN and Qriocity users:[28]

To date, there is no confirmed evidence any credit card or personal information has been misused, and we continue to monitor the situation closely. We are also moving ahead with plans to help protect our customers from identity theft around the world. A program for U.S. PlayStation Network and Qriocity customers that includes a $1 million identity theft insurance policy per user was launched earlier today and announcements for other regions will be coming soon.

References

  1. ^ a b http://uk.playstation.com/psn/news/articles/detail/item369506/PSN-Qriocity-Service-Update/. {{cite news}}: Missing or empty |title= (help)
  2. ^ "BBC News - Sony faces legal action over attack on PlayStation network". Bbc.co.uk. Retrieved 2011-04-29.
  3. ^ Richmond, Shane. "Millions of internet users hit by massive Sony PlayStation data theft". Telegraph. Retrieved 2011-04-29.
  4. ^ "PlayStation users in Australia urged to check credit card activity". The Australian. Retrieved 2011-04-29.
  5. ^ "Kazuo Hirai's Letter to the U.S. House of Representatives - a set on Flickr". Flickr.com. Retrieved 2011-05-05. Information appears to have been stolen from all PlayStation Network user accounts, although not every piece of information in those accounts appears to have been stolen","The criminal intruders stole personal information from all of the approximately 77 million PlayStation Network and Qriocity service accounts.
  6. ^ "PlayStation Network and Qriocity Outage FAQ – PlayStation.Blog.Europe". Blog.eu.playstation.com. Retrieved 2011-04-29.
  7. ^ Posted: Apr 27, 2011 10:56 AM ET. "PlayStation data breach deemed in 'top 5 ever' - Business - CBC News". Cbc.ca. Retrieved 2011-04-29.{{cite news}}: CS1 maint: numeric names: authors list (link)
  8. ^ "Video: Sony PlayStation - Hacker Breaks Into Network And Steals Details Of Millions Of Gamers | Technology | Sky News". News.sky.com. Retrieved 2011-04-29.
  9. ^ 2:11PM BST 27 Apr 2011 Comments. "PlayStation hack: top five data thefts". Telegraph. Retrieved 2011-04-29.{{cite web}}: CS1 maint: numeric names: authors list (link)
  10. ^ "PlayStation Network down for seventh day". ComputerAndVideoGames.com. Retrieved 2011-04-29.
  11. ^ "PlayStation Network Hacked - Your Personal Details Could Be At Risk! - 28 April 2011 - Rockstar Gaming". Rockstargaming.ucoz.com. Retrieved 2011-04-29.
  12. ^ "PlayStation Network Breach Worsens: Hackers Post Private Data on Sony Website". Technorati. 2011-05-08. Retrieved 2011-05-08.
  13. ^ "PSN Might Not "Fully" Be Back Until May 31 - Report". 1UP.com. 2011-05-09. Retrieved 2011-05-09.
  14. ^ "Update on PSN Service Outages – PlayStation Blog". Blog.us.playstation.com. 2011-04-20. Retrieved 2011-04-29.
  15. ^ "Latest Update on PSN Outage – PlayStation Blog". Blog.us.playstation.com. 2011-04-21. Retrieved 2011-04-29.
  16. ^ "Update On PlayStation Network/Qriocity Services – PlayStation Blog". Blog.us.playstation.com. 2011-04-22. Retrieved 2011-04-29.
  17. ^ "PlayStation® Knowledge Center | Support - PlayStation.com". Us.playstation.com. 2011-01-10. Retrieved 2011-04-29.
  18. ^ "Latest Update for PSN/Qriocity Services – PlayStation Blog". Blog.us.playstation.com. 2011-04-23. Retrieved 2011-04-29.
  19. ^ "PSN Update – PlayStation Blog". Blog.us.playstation.com. 2011-04-25. Retrieved 2011-04-29.
  20. ^ "Update on PlayStation Network and Qriocity – PlayStation Blog". Blog.us.playstation.com. 2011-04-19. Retrieved 2011-04-29.
  21. ^ "Some PlayStation Network And Qriocity Services To Be Available This Week – PlayStation.Blog.Europe". Blog.eu.playstation.com. Retrieved 2011-05-01.
  22. ^ a b Wesley Yin-Poole. "PSN: Sony outlines "Welcome Back" gifts News - PlayStation 3 - Page 1". Eurogamer.net. Retrieved 2011-05-04.
  23. ^ "Some PlayStation Network And Qriocity Services To Be Available This Week – PlayStation.Blog.Europe". Blog.eu.playstation.com. Retrieved 2011-05-07.
  24. ^ a b "Service Under Maintenance". SOE. 2010-03-31. Retrieved 2011-05-04.
  25. ^ "Sony Confirms Thousands Of Credit Cards Stolen During Hack - GameInformer News". gameinformer.com/b/news/archive/2011/05/02/. 2011-05-02. Retrieved 2011-05-02.
  26. ^ "Sony's Response to the U.S. House of Representatives – PlayStation Blog". Blog.us.playstation.com. 2010-12-20. Retrieved 2011-05-07.
  27. ^ "Sony Offering Free 'AllClear ID Plus' Identity Theft Protection in the United States through Debix, Inc. – PlayStation Blog". Blog.us.playstation.com. Retrieved 2011-05-07.
  28. ^ a b "A Letter from Howard Stringer – PlayStation Blog". Blog.us.playstation.com. 2010-12-20. Retrieved 2011-05-07.
  29. ^ "Important Step for Service Restoration – PlayStation.Blog.Europe". Blog.eu.playstation.com. Retrieved 2011-05-07.
  30. ^ JC Fletcher (2011-05-06). "PSN reactivation delayed for 'further testing,' likely not coming back this week". Joystiq. Retrieved 2011-05-07.
  31. ^ http://twitter.com/#!/SonyOnline/status/66671981101199360
  32. ^ Reynolds, Isabel. "Sony CEO apologises for data theft; shares fall 2 pct". Reuters. Retrieved 2011-05-07.
  33. ^ "Sony says has removed data stolen by hackers and posted online - Entertainment - The Arts - TODAY.com". Today.msnbc.msn.com. 2011-05-03. Retrieved 2011-05-07.
  34. ^ "Sony's Response to the U.S. House of Representatives – PlayStation Blog". Blog.us.playstation.com. Retrieved 2011-05-05.
  35. ^ "Clarifying a Few PSN Points – PlayStation Blog". Blog.us.playstation.com. 2011-04-26. Retrieved 2011-05-07.
  36. ^ "Q&A #1 for PlayStation Network and Qriocity Services – PlayStation Blog". Blog.us.playstation.com. 2010-12-20. Retrieved 2011-04-29.
  37. ^ Watt, Peggy (30 April 2011). "Sony: PlayStation Network Resumes This Week". pcworld.com. Retrieved 2 May 2011.
  38. ^ Fletcher, JC (2011-05-01). "PSN 'welcome back program' includes a free download, 30 days free PlayStation Plus, Qriocity". joystiq.com. Retrieved 2011-05-02.
  39. ^ "Another team added to Sony's PSN investigation". VG247. Retrieved 2011-05-04.
  40. ^ Bartz, Diane (2011-04-26). "Sony blames Anonymous for stage-setting theft". Reuters. Retrieved 2011-05-04.
  41. ^ Edwards, Cliff (2011-04-26). "PlayStation Hackers May Have Stolen Data on 75 Million Users, Sony Says". Bloomberg. Retrieved 2011-04-29.
  42. ^ "News - Opinion: Sony's Communication Problem". Gamasutra. Retrieved 2011-04-29.
  43. ^ "PlayStation Network Outage Bad News for Netflix and Hulu: Online Video News «". Gigaom.com. Retrieved 2011-04-29.
  44. ^ "BBC News - Sony's PlayStation hack apology". Bbc.co.uk. 2011-04-19. Retrieved 2011-04-29.
  45. ^ Reynolds, Isabel (2009-02-09). "Furore at Sony after Playstation user data stolen". Reuters. Retrieved 2011-04-29.
  46. ^ "Sony defends notification delay in data fiasco | Security | News". PC Pro. Retrieved 2011-04-29.
  47. ^ "Senator: Lack of details on PlayStation Network outage 'troubling' - Game Hunters: In search of video games and interactive awesomeness - USATODAY.com". Content.usatoday.com. 2011-01-04. Retrieved 2011-04-29.
  48. ^ Stuart, Keith. "PlayStation Network hack: why it took Sony seven days to tell the world | Technology | guardian.co.uk". Guardian. Retrieved 2011-04-29.
  49. ^ "Q&A #1 for PlayStation Network and Qriocity Services – PlayStation Blog". Blog.us.playstation.com. 2010-12-20. Retrieved 2011-04-29.
  50. ^ Williams, Christopher. "PlayStation hack: Sony users urged to change passwords". Telegraph. Retrieved 2011-04-29.
  51. ^ "PlayStation Network Security Update – PlayStation Blog". Blog.us.playstation.com. 2011-05-02. Retrieved 2011-05-07.
  52. ^ "24.6 million SOE accounts potentially compromised | News". Gamesindustry.biz. 2011-03-21. Retrieved 2011-05-04.
  53. ^ "EverQuest Down". Progression Server. 2011-05-02. Retrieved 2011-05-2. {{cite web}}: Check date values in: |accessdate= (help)
  54. ^ "Sony:Another 25M users' info hacked". Times of India. 2011-05-02. Retrieved 2011-05-2. {{cite web}}: Check date values in: |accessdate= (help)
  55. ^ "Security Update". Sony Online Entertainment. 2011-05-02. Retrieved 2011-05-2. {{cite web}}: Check date values in: |accessdate= (help)
  56. ^ James Brightman (2011-05-03). "Sony Breach 'Difficult to Excuse' Say Security Experts". IndustryGamers. Retrieved 2011-05-05.
  57. ^ Emily Chung (2011-05-03). "Sony data breach update reveals 'bad practices'". CBC News. Retrieved 2011-05-05.
  58. ^ Robert Westervelt (2011-05-03). "Sony attack: Sony expands scope of its massive data security breach". SearchSecurity.com. Retrieved 2011-05-05.
  59. ^ Matthew J. Schwartz (2011-05-03). "Sony Reports 24.5 Million More Accounts Hacked". InformationWeek. Retrieved 2011-05-05.
  60. ^ Sony Computer Entertainment America. "Q&A #2 for Playstation Network and Qriocity". playstation.com. Retrieved 2011-04-29.
  61. ^ Posted 2 days ago - By Leah Jackson. "Hulu Offering Free Credit For PS3 Subscribers". G4tv.com. Retrieved 2011-04-29.{{cite web}}: CS1 maint: numeric names: authors list (link)
  62. ^ Richmond, Shane. "Millions of internet users hit by massive Sony PlayStation data theft". Telegraph. Retrieved 2011-04-29.
  63. ^ a b Williams, Christopher. "PlayStation hack: Sony faces watchdog's questions". Telegraph. Retrieved 2011-04-29.
  64. ^ Wesley Yin-Poole. "ICO confirms it will quiz Sony over PSN News - PlayStation 3 - Page 1". Eurogamer.net. Retrieved 2011-04-29.
  65. ^ "Privacy Commissioner's office looking into Sony PlayStation hack". Canada.com. Retrieved 2011-04-29.
  66. ^ "Blumenthal Demands Answers from Sony over Playstation Data Breach". Richard Blumenthal-US senator for Connecticut: Home. Retrieved 2011-04-26.
  67. ^ "Blumenthal Calls for DOJ Investigation of Sony Playstation Data Breach". Richard Blumenthal-US senator for Connecticut: Home. Retrieved 2011-04-29.
  68. ^ "US lawmakers press Sony for info on data breach". Associated Press. 2011-04-29. Retrieved 2011-04-30.
  69. ^ Ogg, Erica (2011-03-24). "Sony sued for PlayStation Network data breach | Circuit Breaker - CNET News". News.cnet.com. Retrieved 2011-04-29.
  70. ^ "Johns v. Sony Computer Entertainment America LLC et al". Justia. 2011-05-03. Retrieved 2011-05-03.
  71. ^ Schwartz, Mathew J. "Sony Sued Over PlayStation Network Hack". InformationWeek. Retrieved 2011-04-29.
  72. ^ "Canadian Law Firm Files $1 Billion Lawsuit Against Sony Over PSN Data Breach". Gamastura. 2011-05-04. Retrieved 2011-05-04.
  73. ^ "Sony PlayStation Network Down: PSN Hit with $1.04B Class Action Suit". Gather. 2011-05-04. Retrieved 2011-05-04.
  74. ^ a b "PlayStation users reporting credit card fraud". Retrieved April 30, 2011.
  75. ^ "Hackers run up debt for PlayStation user". Retrieved April 30, 2011.
  76. ^ "Hackers claim to have 2.2 million card details". Retrieved April 30, 2011.
  77. ^ "Ars readers report credit card fraud". Retrieved April 30, 2011.
  78. ^ "Sony FAQ". Retrieved April 30, 2011.
Retrieved from "https://en.wikipedia.org/w/index.php?title=2011_PlayStation_Network_outage&oldid=428536355"