• Categories

  • Archives

    « Home

    Update: UK ICO fines Sony £250,000 for 2011 data breach

    In 2011, Sony faced substantial security problems. The company, which had to apologize for an April 2011 security breach of millions of its Playstation customers’ data and then a later security breach at its Sony Online Entertainment division. Then there were reports of yet more data security breaches in Sony’s systems in Greece, Thailand and Indonesia. And then reports that Sony had to shut down Web sites in Canada, as well. Then reports of a security breach of Sony Pictures’ Web site data.

    Now, MSN Money UK reports that the Information Commissioner’s Office has fined Sony for the Playstation privacy breach that occurred in 2011:

    Gaming giant Sony has been fined £250,000 by the data watchdog for a breach that compromised the personal information of millions of PlayStation users.

    The Information Commissioner’s Office (ICO) issued the penalty after it found the attack on the Sony PlayStation Network in April 2011 could have been prevented.

    Personal information including customers’ payment card details, names, addresses, email addresses, dates of birth and account passwords were exposed.

    David Smith, ICO deputy commissioner and director of data protection, said: “If you are responsible for so many payment card details and log-in details, then keeping that personal data secure has to be your priority. […]

    The ICO added that following the breach, Sony rebuilt its Network Platform to ensure that the personal information it processes is kept secure. Sony temporarily shut down its network, a system that links gamers worldwide in live play, after discovering the massive security breach.

    The company said that personal data from 77 million users of Sony’s PlayStation network had been compromised. Users were all asked to change their passwords following the breach. […]

    A Sony spokesman said the firm will be appealing against the ICO’s decision.

    Leave a Reply