This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 3634 To_xml

SUMMARY

77 million names, addresses, email addresses, birthdates, PlayStation Network/Qriocity passwords and logins, handle/PSN online ID, profile data, purchase history and possibly credit cards obtained.
Records 77,000,000
Record Types NAA MISC ACC DOB PWD ADD
Breach Type Hack
Data Family Electronic
Source Outside
Organization Sony Corporation
Other Affected/Involved Organizations None
Lawsuit? NO/UNKNOWN
Data Recovered? NO/UNKNOWN
Arrest? NO/UNKNOWN
Submitted By: jkouns

TIMELINE

DateEvent
2011-04-17 Incident Occurred
2011-04-21 Incident Discovered By Organization
2011-04-26 Organization Reports Incident
2011-04-27 Organization Mails Notifications
None. Add Data Records Recovered
2011-04-27 Lawsuit Filed
None. Add Data Arrest Made

SIMILAR INCIDENTS

recordsdateorganizations
40,000,000 2005-06-19 CardSystems, Visa, MasterCard, American Express
94,000,000 2007-01-17 TJX Companies Inc.
90,000,000 1984-06-01 TRW, Sears Roebuck
40,000,000 2011-12-26 Tianya

MAP OF INCIDENT LOCATION

Address: United States
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

COSTS SUMMARY

Known Actual Costs

No known costs for this incident.

Estimated Costs

Ponemon Institute Direct Costs Estimate 1 $4,620,000,000.00
  1. Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

COMMENTS

by Anonymous on 2011-06-05 (12 months ago)

2011-04-17 Incident Occurred
2011-04-14 Incident Discovered By Organization

Woah, time machines and shit.

by jkouns [Master Researcher] on 2011-06-05 (12 months ago)

Thanks for the heads up. Not sure how we got turned around on the dates. Updated discovered to April 21st, the first time it appears they took down the network. If anyone has better information please let us know!

by Anonymous on 2011-07-13 (10 months ago)

Does anyone know what type of database they were using?

New Comment

captcha
Are you human?

Sponsored By: Rbs Tenable Zecurion
Use of the DataLossDB, and its exports, RSS feeds, reports, or other materials produced on this site by the Open Security Foundation requires authorization and potential licensing arrangements. For more information, please e-mail officers@opensecurityfoundation.org with a brief summary of how you would like to use this information; product, service, research, etc.
© 2005 - 2012, Open Security Foundation, All Rights Reserved.