Anonymous strikes again

[Hobie-wan]

Woa woa woa. So... did the hackers try to blackmail Sony? Did I read that right?

Yeah, if that's true, that was monumentally stupid.

[MrPopo]

Hackers Claim to Have PlayStation Users’ Card Data

PSN: Credit card details up for sale

And this is why nobody has any sympathy when companies go after these people. If they wanted to prove a point they would have snagged the cards, shown to Sony they were able to snag them, and then destroy the data. Attemping to sell them just shows that they're little shits with a huge sense of entitlement.

[wip3outguy7]

Hackers Claim to Have PlayStation Users’ Card Data

PSN: Credit card details up for sale

Honestly not surprised by this. Destructoid already posted an article showing screenshots of PSN credit card entry menus that request the CVC number. Long time PSN users are coming forward claiming that they had entered their Credit Card security codes on these screens and had never been asked for them again when making purchases on PSN, meaning the CVC numbers must have been stored somewhere. Sony specifically has said they did not record CVC numbers when clearly this is not true, at least in some cases. It appears that these menus were later altered to no longer ask for the security codes (it's against many Credit Card company regulations to store these numbers).

So if they are lying about the CVC codes, I'm certain they are lying about the Credit Card information being safe and secure.

I would like more information on other accounts that possibly touched the PSN database. What about Netflix information? Hulu? Was that billing and credit card number also filtered through the PSN database and stored?

[FiftyDollarCurse]

Long time PSN users are coming forward claiming that they had entered their Credit Card security codes on these screens and had never been asked for them again when making purchases on PSN

That's how PSN works. You add money to your "PSN Wallet" with your credit card. When you make a purchase the money is taken out of the "wallet", not your credit card.

[wip3outguy7]

What about when adding funds to the wallet again? If the CVC isn't asked for then, I would assume it is stored somewhere.

I have never made any purchases on PSN before so I am speculating based on Destructoid's article.

[wip3outguy7]

Sony's response to CVC numbers:

As our friends at Destructoid pointed out, I was incorrect on the last point of the credit card question above. I want to make an important distinction: While we do ask for CCV codes, we do not store them in our database. It is transmitted to our payment processors for verification purposes only. Deep apologies for the confusion.

http://blog.us.playstation.com/2011/04/ ... ent-549273

[FiftyDollarCurse]

I'm pretty sure it's a one-time verification deal. Amazon doesn't ask for it every time I buy something there either and I doubt they are violating the law with every single transaction.

[Niode]

Hackers Claim to Have PlayStation Users’ Card Data

PSN: Credit card details up for sale

Woa woa woa. So... did the hackers try to blackmail Sony? Did I read that right?

Oh man...

Thank goodness I always delete my credit info after I buy something from any online store. This is fucking crazy. These hackers are going to go to jail for a long time if somebody finds out where they are.

Doesn't matter if you delete it, companies can still store it. They just have to get rid of it within 6 months. However, this is not always the case. It's not legal but how will you ever know?

[RyaNtheSlayA]

Hackers Claim to Have PlayStation Users’ Card Data

PSN: Credit card details up for sale

Woa woa woa. So... did the hackers try to blackmail Sony? Did I read that right?

Oh man...

Thank goodness I always delete my credit info after I buy something from any online store. This is fucking crazy. These hackers are going to go to jail for a long time if somebody finds out where they are.

Doesn't matter if you delete it, companies can still store it. They just have to get rid of it within 6 months. However, this is not always the case. It's not legal but how will you ever know?

Is it the same in the UK as here in the US?

Anyway, I'll just keep an eye on my debit card to make sure. I'm switching to a new bank soon anyway so I guess this just might give me incentive to switch earlier than I had planned.

[Niode]

Is it the same in the UK as here in the US?

Anyway, I'll just keep an eye on my debit card to make sure. I'm switching to a new bank soon anyway so I guess this just might give me incentive to switch earlier than I had planned.

I'm only familiar with the Data Protection Act in the UK, I don't know if it's the same anywhere else... Can't imagine why it wouldn't be.