The_Darkest_Red
Member
Seriously guys, I just got a $100 charge on my AmEx card for gas from a few states away. I've only had this card for a year or so and I don't use it much. I honestly think the CC info has been leaked.
-
Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.
PSN Hack Update: FAQs in OP, Read before posting
- Thread starter Killthee
- Start date
- Status
Fallout-NL
Member
Gamejunky said:
Pretty awesome.
If any of you guys used a gmail account as your PSN login, log into that gmail account and double-check who has accessed it (even if you have diff PW, it doesn't hurt to look).
For those who aren't aware, Google, in a hugely useful touch, logs the IP addresses of everyone who logs into your gmail account within the past 48-72 or so hours. At the bottom you can see the IP of the person who last accessed it, and if you hit "Details" it takes you to a list of recent IP logs. If it isn't matching up with the IPs you recently accessed the account from, you know something could be up.
For those who aren't aware, Google, in a hugely useful touch, logs the IP addresses of everyone who logs into your gmail account within the past 48-72 or so hours. At the bottom you can see the IP of the person who last accessed it, and if you hit "Details" it takes you to a list of recent IP logs. If it isn't matching up with the IPs you recently accessed the account from, you know something could be up.
anonymousAversa
Member
cedric69 said:
See below:
The_Darkest_Red said:
Also, some other posters have pointed out that it may take a while before the CC information can be sold on the black market and then used. Damn.
This will turn out to be a sh*tshow. I don't think this is overblown in the media at all. Quite the opposite. In fact, the consequences of users' COMPLETE personal information being stolen will probably be felt for years. Honestly, the only possible worse scenario would have been if our social security numbers were also stolen. That would basically mean endless nuisance for the rest of your life. For now, you can fully expect about 1000x more spam and phishing in your email accounts, as well as identity theft attempts. See below. Again, from the WSJ:
"Credit card numbers on their own currently trade for as little as 5¢-12¢ on the black market, but complete data including billing address, email addresses and personal information like dates of birth, represent the rich data that allow highly targeted attacks against individuals. This sort of data commands much higher pricesand is much sought after by cyber criminals.
Sony has warned that hackers have been able to access a variety of personal information belonging to users including:
Name
Address (city, state, zip code)
Country
Email address
Date of birth
PlayStation Network/Qriocity password and login
Handle/PSN online ID
In addition, Sony warns that profile informationsuch as history of past purchases and billing addresses, as well as secret answers given to Sony for password security may also have been obtained. Sony also admits that it cannot rule out the possibility that credit card information may also have been compromised."
Hmm ok..that sounds great. Fine I'll just change all my passwords. But umm...well what's all this about identity theft?
"Other measures
With the sort of data compromised it is possible for criminals to commit identity theft and use your details to open bank accounts, take out mobile phone contracts, and even re-direct your mail. Security professionals suggest obtaining a copy of your credit report which should give a complete account of your status as well as any searches against your credit history. U.K. residents can obtain a copy of their credit file from companies such as Equifax, Experian or Callcredit."
So basically, I'm an infinite amount more likely to have my identity stolen and have fraudsters open bank accounts, cable service, apply for mortgages, etc.. in my name. Changing your passwords and cancelling credit cards doesn't help. My only comfort, is the fact that since 70 MILLION accounts were stolen, I only hope my ticket doesn't get punched by the hackers since they have so many to choose from.
Thanks Sony!
"Credit card numbers on their own currently trade for as little as 5¢-12¢ on the black market, but complete data including billing address, email addresses and personal information like dates of birth, represent the rich data that allow highly targeted attacks against individuals. This sort of data commands much higher pricesand is much sought after by cyber criminals.
Sony has warned that hackers have been able to access a variety of personal information belonging to users including:
Name
Address (city, state, zip code)
Country
Email address
Date of birth
PlayStation Network/Qriocity password and login
Handle/PSN online ID
In addition, Sony warns that profile informationsuch as history of past purchases and billing addresses, as well as secret answers given to Sony for password security may also have been obtained. Sony also admits that it cannot rule out the possibility that credit card information may also have been compromised."
Hmm ok..that sounds great. Fine I'll just change all my passwords. But umm...well what's all this about identity theft?
"Other measures
With the sort of data compromised it is possible for criminals to commit identity theft and use your details to open bank accounts, take out mobile phone contracts, and even re-direct your mail. Security professionals suggest obtaining a copy of your credit report which should give a complete account of your status as well as any searches against your credit history. U.K. residents can obtain a copy of their credit file from companies such as Equifax, Experian or Callcredit."
So basically, I'm an infinite amount more likely to have my identity stolen and have fraudsters open bank accounts, cable service, apply for mortgages, etc.. in my name. Changing your passwords and cancelling credit cards doesn't help. My only comfort, is the fact that since 70 MILLION accounts were stolen, I only hope my ticket doesn't get punched by the hackers since they have so many to choose from.
Thanks Sony!
darkhunger
Member
Valru said:A spare gmail account which was associated with my PSN account that shared the same password was compromised today.
Nothing of value on that account, thankfully google alerted me to the intrusion.
A good reminder to not use one password on every site. I personally use lastpass with random strongpasses for anything important.
Yup... I got an alert this morning on the Yahoo mail account that I use with PSN that they "suspected my email account was compromised".
Was using it last night with no problems, and didn't do anything unusual. And its not an account I usually use either, so its too much of a coincidence.
Trying to find out if I can expect a charge for this. If it's a standard SMS then it should be covered under contract, but I very much doubt that's the case. :/Valru said:
EDIT: Just noticed they have an authenticator app.
That seems crazy. I phoned my bank late last night (~23:00), told them the details, they put me through to the lost and stolen department and they cancelled my current card and issued a new one there and then - expecting the replacement to come tomorrow.swordfishtrombones said:
Treefingers
Member
Not sure if it's due to this but I've had my Hotmail account blocked due to suspicious activity or whatever. But I haven't checked it for a few weeks so I can't say it's related.
MoneyLaunderer
Member
FINALBOSS said:
I agree. At least it would give all of us something to "look forward to" when PSN does relaunch. And it would be a nice surprise.
Outtrigger888
Member
Fuck I forgot what password I used for PSN, I dont think it was my main one. Did psn passwords require numbers?
Captain Tuttle
Member
Maybe the numbers were compromised weeks ago and now that this story has gone public the criminals are using as many as they can before the cards get turned off.Ickman3400 said:
-Pyromaniac-
Member
How do you even use it at a gas station with only the number? lol what kind of weird ass gas stations do you guys have in America. Unless that story is BS.CRD90 said:
Professor Beef
Banned
If a hacker got me a birthday present, all will be forgiven.hooligan said:
UberTag
Member
<looks at thread>
<sees 10 people all reiterate that anecdotal reports of credit card fraud cases are all fictitious/untrue/result of previous customer incompetence>
<same thing with instances of E-Mail hijacking>
<it's only a coincidence that it's the same PII involved>
Carry on folks.
<sees 10 people all reiterate that anecdotal reports of credit card fraud cases are all fictitious/untrue/result of previous customer incompetence>
<same thing with instances of E-Mail hijacking>
<it's only a coincidence that it's the same PII involved>
Carry on folks.
MoneyLaunderer
Member
Professor Beef said:
They'll buy you a PSN card.
RustyNails
Member
Looks to me like Ars is trying to field an angry mob of sorts.
Spectral Glider
Member
I changed my card this morning, easy to do and figure it's better than waiting for a bogus charge on it.
Not sure what to do about the other personal info, guess there's not much you can do really.
Not sure what to do about the other personal info, guess there's not much you can do really.
KennyLinder
Member
warpaint said:
Its the press release BBC had pretty much:
Valued PlayStation Network/Qriocity Customer:
We have discovered that between April 17 and April 19, 2011, certain PlayStation Network and Qriocity service user account information was compromised in connection with an illegal and unauthorized intrusion into our network. In response to this intrusion, we have:
1) Temporarily turned off PlayStation Network and Qriocity services;
2) Engaged an outside, recognized security firm to conduct a full and complete investigation into what happened; and
3) Quickly taken steps to enhance security and strengthen our network infrastructure by re-building our system to provide you with greater protection of your personal information.
We greatly appreciate your patience, understanding and goodwill as we do whatever it takes to resolve these issues as quickly and efficiently as practicable.
Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information that you provided: name, address (city, state/province, zip or postal code), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID. It is also possible that your profile data, including purchase history and billing address (city, state, zip), and your PlayStation Network/Qriocity password security answers may have been obtained. If you have authorized a sub-account for your dependent, the same data with respect to your dependent may have been obtained. While there is no evidence that credit card data was taken at this time, we cannot rule out the possibility. If you have provided your credit card data through PlayStation Network or Qriocity, to be on the safe side we are advising you that your credit card number (excluding security code) and expiration date may have been obtained.
For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Sony will not contact you in any way, including by email, asking for your credit card number, social security, tax identification or similar number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking. When the PlayStation Network and Qriocity services are fully restored, we strongly recommend that you log on and change your password. Additionally, if you use your PlayStation Network or Qriocity user name or password for other unrelated services or accounts, we strongly recommend that you change them, as well.
To protect against possible identity theft or other financial loss, we encourage you to remain vigilant to review your account statements and to monitor your credit or similar types of reports.
We thank you for your patience as we complete our investigation of this incident, and we regret any inconvenience. Our teams are working around the clock on this, and services will be restored as soon as possible. Sony takes information protection very seriously and will continue to work to ensure that additional measures are taken to protect personally identifiable information. Providing quality and secure entertainment services to our customers is our utmost priority. Please contact us at www.eu.playstation.com/psnoutage should you have any additional questions.
Sincerely,
Sony Network Entertainment and Sony Computer Entertainment Teams
Sony Network Entertainment Europe Limited (formerly known as PlayStation Network Europe Limited) is a subsidiary of Sony Computer Entertainment Europe Limited the data controller for PlayStation Network/Qriocity personal data
Professor Beef
Banned
That would be swell, especially since I have no payment options available to them online.MoneyLaunderer said:They'll buy you a PSN card.
Psychotext
Member
I want to compliment FINALBOSS on all of his PR efforts over the last 24 hours. There was a point where he looked like he'd lost it (quoting himself to agree with himself) but he recovered and since then he's been doing his best to spin this all into glorious sunshine and rainbows.
I salute you.
I salute you.
mariachi507
Member
Outtrigger888 said:
Yes. Which means I didn't use my usual password.
-Pyromaniac-
Member
I think that's a bit conspiracy theory-ish in this case but hey anything is possible. Just doesn't sound connected to this incident.Vamphuntr said:
The Lamonster
Member
Is there a way to see what password I used when I originally set up my PSN account?
pantyhelmet
Banned
i agree, too farfetched!Captain Pants said:
blazinglazers
Member
Completely untrue. The easiest way to use your personal information & incomplete credit card info is at remote places with little security. Most online retailers require ALL of your data, including the security code, the one thing that Sony claims wasn't stolen so far. It's easier to use spoofed cards at gas stations, small stores, out of the way business that either don't immediately verify charges, or run charges with limited info.CRD90 said:
I don't know how it's done, I just know that it happens. Identity theft is pretty fascinating actually, if you have some of the info and know what you're doing, apparently you can take it pretty far. If you like novels, you should check out Await Your Reply by Dan Chaon; it's an awesome thriller & it details a lot of the scams & techniques.-Pyromaniac- said:
FunnyBunny
Member
It's incredibly easy and cheap to clone cards as long as you have the account number.-Pyromaniac- said:
-Pyromaniac-
Member
lol true as well.Kud Dukan said:
Hmm, so according to the BBC, 'off the record' Sony are saying CC info probably not compromised.
http://www.bbc.co.uk/news/business-13193891
40 seconds in.
http://www.bbc.co.uk/news/business-13193891
40 seconds in.
-Pyromaniac-
Member
you seem to know too much about this, sony/fbi contacted. See you in 10-15.FunnyBunny said:
UberTag said:<looks at thread>
<sees 10 people all reiterate that anecdotal reports of credit card fraud cases are all fictitious/untrue/result of previous customer incompetence>
<same thing with instances of E-Mail hijacking>
<it's only a coincidence that it's the same PII involved>
Carry on folks.
Yes, stick your head in the sand. Web-based e-mail accounts are well-known for their ability to withstand hijacking.
- Status