Sony attack 'sophisticated'

2011-05-05 11:31
Washington - The data breach that hit Sony's PlayStation Network resulted from a "very carefully planned, very professional, highly sophisticated criminal cyber attack designed to steal personal and credit card information for illegal purposes", a Sony executive said.

In a letter to members of the House Commerce Committee released on Wednesday, Kazuo Hirai, chair of Sony Computer Entertainment America LLC, defended the company's handling of the breach.

Sony first disclosed the attack last week and said it may have compromised credit card data, e-mail addresses and other personal information from 77 million user accounts. On Monday, Sony said data from an additional 24.6 million online gaming accounts also may have been stolen.

The company has shut down the affected systems while it investigates the attacks and beefs up security. Hirai said Sony is working "around the clock to get the systems back up and to make sure all our customers are informed of the data breach and our responses to it".

Addressing criticism that the company waited too long to inform customers, Hirai said Sony waited until it had a solid understanding and confirmation of the extent of the attack and its implications.

Unusual activity

"Throughout the process, Sony Network Entertainment America was very concerned that announcing partial or tentative information to consumers could cause confusion and lead them to take unnecessary actions if the information was not fully corroborated by forensic evidence," he wrote.

Although Sony began investigating unusual activity on the PlayStation network on April 19, it did not notify consumers of the breach until April 26.

Hirai's letter said the company knows who is responsible for the attack and is working with outside security and forensics consultants and the Federal Bureau of Investigation.

The letter also noted that the breach came on the heels of large-scale, co-ordinated denial-of-service attacks launched by a loose international group of hackers called Anonymous against several Sony operations in retaliation for a complaint filed by the company against a hacker in US District Court in San Francisco.

On Sunday Sony discovered that intruders had planted a file named "Anonymous" on one server that had been breached, Hirai said.

Late in 2010, Anonymous distributed hacking software to be used against companies that stopped doing business with the anti-secrecy site WikiLeaks after it released thousands of classified government documents.

Hirai's letter added that Sony may not have immediately detected the PlayStation breach in part because its security teams were busy trying to defend against the denial-of-service attacks.

Legislation

"Whether those who participated in the denial-of-service attacks were conspirators or whether they were simply duped into providing cover for a very clever thief, we may never know," Hirai wrote.

Hirai was one of three Sony executives who bowed in apology for the data breaches for several seconds at the company's Tokyo headquarters on Sunday.

Sony officials were invited to testify at a subcommittee hearing on data breaches held on Wednesday, but did not appear.

One witness, David Vladeck, director of Federal Trade Commission's bureau of consumer protection, during his testimony called for legislation that would require companies to implement reasonable data security policies and procedures, and notify consumers in the event of a breach.
- AP
Read more on:    sony  |  cybercrime
NEXT ON NEWS24X
SHARE:

Read News24’s Comments Policy

24.com publishes all comments posted on articles provided that they adhere to our Comments Policy. Should you wish to report a comment for editorial review, please do so by clicking the 'Report Comment' button to the right of each comment.

Comment on this story
1 comment
Add your comment
Comment 0 characters remaining

Inside News24

 
/News

Jobs in Cape Town [change area]

Property [change area]

Travel - Look, Book, Go!

Kalahari.com - shop online today

Save up to 40% on outdoor accessories!

Tents, sleeping, day packs and more. While stocks last. Shop now!

Month End Madness Sale!

Save up to 60% on across a wide range of goods from books to electronics, DVDs and many more. Sale end 31 January 2015. Shop now!

Valentine’s Day gifts – 14 Feb!

Gifts to spoil him and her. While stocks last. Shop now!

30% off fragrances

Get 30% off fragrances for him and her. While stocks last. Shop now!

Up to 30% off All Textbooks

Save up to 30% off an extensive range of prescribed textbooks for all major universities and FET colleges. Shop Now!

OLX Free Classifieds [change area]

Samsung Galaxy s4

Mobile, Cell Phones in South Africa, Western Cape, Cape Town. Date October 24

Best bargain in big bay

Real Estate, Houses - Apartments for Sale in South Africa, Western Cape, Cape Town. Date October 25

VW Golf 6, 1.6 Trendline (Excellent condition)

Vehicles, Cars in South Africa, Western Cape, Cape Town. Date October 25

Horoscopes
Aquarius
Aquarius

Spontaneity and bright ideas are emphasized today but there is a tendency to be too impulsive and you may want to keep a handle on...read more

There are new stories on the homepage. Click here to see them.
 
English
Afrikaans
isiZulu

Hello 

Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.


Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire 24.com network.

Settings

Location Settings

News24 allows you to edit the display of certain components based on a location. If you wish to personalise the page based on your preferences, please select a location for each component and click "Submit" in order for the changes to take affect.








Facebook Sign-In

Hi News addict,

Join the News24 Community to be involved in breaking the news.

Log in with Facebook to comment and personalise news, weather and listings.