Support NeoGAF

[XXL]

Hopefully we get some good info.

 

[Rocco Schiavone]

Tempered expectations?

No. Leaked two playable characters and Vice City. Enough for me.

 

[delfrickintree]

Jokes aside, this kind of stuff fucking sucks. Nobody wins, except possibly the dickhead hackers. Selfish pieces of shit.

Part of the principle of some hackers is to test vulnerabilities and get them patched up, so that more nefarious entities dont do more serious damage. Ideally nobody would steal and we wouldnt have to lock our doors, but security exists for a reason and its constantly evolving with technology.

As for myself, Im keeping all my info intact so that if it gets comprimised I can back trace the culprit and do a reverse ransom on them. Even revealing more of my plans might scare them away.. so gotta keep secrets. Always the Spy vs Spy scenarios

 

[RoadHazard]

I had 2FA of course, but changed my password anyway. I know that doesn't actually matter if they already have my info, but at least I know my account is secure.

 

[Dacvak]

Part of the principle of some hackers is to test vulnerabilities and get them patched up, so that more nefarious entities dont do more serious damage. Ideally nobody would steal and we wouldnt have to lock our doors, but security exists for a reason and its constantly evolving with technology.

As for myself, Im keeping all my info intact so that if it gets comprimised I can back trace the culprit and do a reverse ransom on them. Even revealing more of my plans might scare them away.. so gotta keep secrets. Always the Spy vs Spy scenarios

I don't mind white and gray hats at all. That's a valuable service, all around. But these jerks who hold data for hostage for personal payment are absolute donkeyknobbers.

 

[RoadHazard]

Someone on the purple forum has posted a link where you can see a list of files this hacker group supposedly have obtained from Sony: https://qu.ax/HErm.txt

That looks like source code, not database data. But I only looked through a bit of it.

 

[Thick Thighs Save Lives]

That looks like source code, not database data. But I only looked through a bit of it.

So this means that our private data stored on the Sony servers should be safe, right?

 

[RoadHazard]

So this means that our private data stored on the Sony servers should be safe, right?

If it's just source code, yeah. But I didn't look through everything.

 

[bender]

Luckily I haven't had payment methods tied to my account since the last breach. It's usually more economical to use prepaid wallet cards anyway. Still sucks.

 

[Mithos]

Deleted my credit card info on PS just to be safe. 2FA already active.

Did the same. 2FA also already active.

Going to decide tomorrow Tuesday if I call and cancel my current CC and have them issue a new one or not.

 

[El Pistolero]

Crazy world we live in.

And we want everything to be digital...We are screwed.

 

[Crayon]

Fun fact I didn't give them my cc fo ten years after the 2011 hack. So just two years ago I put it back...

 

[SyberWolf]

just checked, i dont have payment details registered. i usually opt out of saving cc/payment details in accounts for this specific reason.

 

[SenkiDala]

I hope this is not true because if it is, timing is horrible, they just raised the price, so if it is the service we can expect for such a high price... This is more than unacceptable.

And if it is true I hope the "leak" or whatever it is, not as big as the 2011 one because it would be a disaster for the image of PlayStation.

 

[cybertailor]

lol, did Microsoft place a call

 

[EverydayBeast]

Sony being breached is infuriating for fanboys why didn’t they hire cyber security?

 

[Bry0]

That looks like source code, not database data. But I only looked through a bit of it.

It looks like QA test stuff for web apps/account pages, some Jenkins stuff amongst other things. Worthless lmao

 

[StereoVsn]

Time to change my password. Don’t have payment method attached anyway (to any gaming service).

 

[Solarstrike]

Death penalty to malicious hackers. Stronger punishment on crime is overdue. Enough is enough. These pieces of isht and their ilk would hack the LHC and hold the world over a black hole for a ransom if they could. A precedent must be set. Example(s) must be set. The sorry excuse of "but ohh the hackers have skills, the government(s) can utilize them, put them to work!", is nil. A.I and quantum computing will take over that skillset and make it seem like a walk in the park with the push of a key or voice phrase.

 

[Beechos]

Oh God please no. Hopefully this is not like the ps3 debacle where psn was down for like 3 weeks and everyone was using hacks to play games online.

 

[Demigod Mac]

Unlikely customer credit card data was breached even if Sony was compromised.
The general best practice (especially for big corporations) is to minimize or eliminate the amount of CC data they store themselves and instead, offload that responsibility onto a payment processor company who specializes in handling and securing it.
So when you purchase something or save your CC while using the Playstation store, all that Sony themselves can see (by querying their payment processor) is if you paid up or not - and that's all they need to know.

 

[ZehDon]

Hopefully we get some good info.

Hopefully this is all BS. If the hackers really have breached "all of Sony's systems", this could have a very real impact on general customers - like most of us. And not just PSN going down for a few weeks; sold personal data, such as credit cards, can become an absolute nightmare.

 

[Crayon]

Ugh we got a ransome attack last year and it was a massive pain in the ass. Our IT team fought and won, somehow. And in the fray, I managed to get an untracked chromebook out of it lol.

 

[Ozzy Onya A2Z]

Ewwwww, Java.

 

[M1chl]

So that's Android code for streaming app or something? Meh. Fucking Android decompiler can do that

 

[darthvargi]

It looks like QA test stuff for web apps/account pages, some Jenkins stuff amongst other things. Worthless lmao

With Jenkins you can figure out some of their builds and Sonarqube may give some insight to poor code but yeah, this is likely nothing.

 

[NiiloPielinen]

 

[Roman Empire]

And that's why I used a digital card. I can just block/delete it and it won't compromise any actual info.

After the 2011 breach, I wouldn't trust Sony with my cc info.

 

[Elios83]

Nowadays I always use two factor verifications and paypal to be safe with all the digital accounts.

Anyway given Sony's silence I guess like this was nothing important otherwise they would have at least admitted it claiming they're investigating into it.

 

[Dice]

I had 2FA of course, but changed my password anyway. I know that doesn't actually matter if they already have my info, but at least I know my account is secure.

Same and fortunately I don't have any payment info stored with them. I also use Paypal or game store gift cards for these types of things anyway in case there is non-profile-bound information kept about their transactions.

 

[RoboFu]

I got compromissed once.

It was cleerly a breech of secretary.

“ breech of secretary “ hot!


Sony,… you are supposed to be a tech company. Get your shit together.

 

[TheDarkPhantom]

2FA has been active since forever and I haven't had a CC linked to my acct since the PS3 days, PSN credits ftw

 

[Dr_Ifto]

Everyone in here acting like it's the end of the world. This looks like a nothing burger.

 

[cormack12]

Trusty old password1. Never let me down so far.

Are people who bid on this data just taking a massive hope that something in there is usable?

 

[DeepEnigma]

Trusty old password1. Never let me down so far.

Are people who bid on this data just taking a massive hope that something in there is usable?

This is what is claimed, which doesn't seem like anything major.

https://qu.ax/HErm.txt

Honestly, it looks like something ripped from the app.

 

[adamsapple]

Sony Launches Investigation After Ransomware Group Claims to Have Breached Company’s Systems - IGN

Sony has said it has launched an investigation after a ransomware group claimed to have breached the company’s systems.

www.ign.com

 

[David B]

Newest info about Sony hack group. Holly crap! https://kotaku.com/reddit-hack-ransom-million-hackers-blackcat-ransomware-1850557426

 

[Bo_Hazem]

adamsapple stop it.

 

[adamsapple]

Newest info about Sony hack group. Holly crap! https://kotaku.com/reddit-hack-ransom-million-hackers-blackcat-ransomware-1850557426

This article is from June.

adamsapple stop it.

 

[DenchDeckard]

So, do I need to change my password?

 

[David B]

This article is from June.

And it's about reddit. No sony. Sorry.

 

[TheUndeadGamer]

If they really had anything substantial they would have posted it already. I think this is a whole bunch of nothing.

 

[ultrazilla]

Well I just had a charge attempted from an Italian restaurant in Atlanta. I'm in Michigan. Luckily my credit union alerted me immediately and they locked out the card.
No way of telling if this was from the hack.

 

[Kilau]

Well I just had a charge attempted from an Italian restaurant in Atlanta. I'm in Michigan. Luckily my credit union alerted me immediately and they locked out the card.
No way of telling if this was from the hack.

It was me, sorry I was hungry for a $30 Italian meal.

 

[Thick Thighs Save Lives]

In the Mystic Ryan video there's a segment on the ransomware group that claims to have hacked Sony.

Video is timestamped:

 

[Trogdor1123]

In the Mystic Ryan video there's a segment on the ransomware group that claims to have hacked Sony.

Video is timestamped:

Coles notes?

 

[adamsapple]

Sony confirms data breach impacting thousands in the U.S.

Sony Interactive Entertainment (Sony) has notified current and former employees and their family members about a cybersecurity breach that exposed personal information.

www.bleepingcomputer.com

Sony Interactive Entertainment (Sony) has notified current and former employees and their family members about a cybersecurity breach that exposed personal information.

The company sent the data breach notification to about 6,800 individuals, confirming that the intrusion occurred after an unauthorized party exploited a zero-day vulnerability in the MOVEit Transfer platform.

The zero-day is CVE-2023-34362, a critical-severity SQL injection flaw that leads to remote code execution, leveraged by the Clop ransomware in large-scale attacks that compromised numerous organizations across the world.

 

[Mr Moose]

In the Mystic Ryan video there's a segment on the ransomware group that claims to have hacked Sony.

Video is timestamped:

So it was MicroSoft! Fuck you, Major Nelson!

 

[X-Wing]

Well I just had a charge attempted from an Italian restaurant in Atlanta. I'm in Michigan. Luckily my credit union alerted me immediately and they locked out the card.
No way of telling if this was from the hack.

Unlikely. In one of the breaches it was employer data that was stolen and in the second one it was a test server that got hacked.

 

[X-Wing]

Death penalty to malicious hackers. Stronger punishment on crime is overdue. Enough is enough. These pieces of isht and their ilk would hack the LHC and hold the world over a black hole for a ransom if they could. A precedent must be set. Example(s) must be set. The sorry excuse of "but ohh the hackers have skills, the government(s) can utilize them, put them to work!", is nil. A.I and quantum computing will take over that skillset and make it seem like a walk in the park with the push of a key or voice phrase.

A lot of these groups are state funded.