Vulnerabilities


Password Reset Problem Derails PlayStation Network

Sony was forced to shut down their PlayStation Network and Qriocity password reset pages today, just days after they finally brought the gaming platform back online following nearly a month of outage stemming from an “external intrusion.”


In the course of the last five or six years, there has come to be a fairly well-established and familiar cycle for data breaches. Company X discovers an attack that compromised some customer data; it investigates and assesses the damage; it reports the breach to the relevant authorities and apologizes publicly while absorbing a beating from the press and angry customers; it moves on with its business. But Sony officials have added another link to that chain–the righteous defense–and in the process may have changed forever the way that companies handle data breaches.

An untold number of computers at the Massachusetts Department of Unemployment Assistance and Department of Career Services were compromised in April, leading state officials to warn hundreds of thousands of people that their personal information may have been stolen as part of the attack. However, officials said they are unsure at this point whether any data was actual stolen, and if so, how much.