Here we go again. I previously wrote about Sony’s failure to inform customers of a data breach in reasonable time, and then subsequent failure to notify customers directly, by email, of their remedies. Since the April data breach, the theory behind the attack is hackers were seeking revenge for Sony suing hackers who modified their system (modifying or unlocking a console is considering hacking). It is also known that Sony did not have an effective firewall in place to defend the PlayStation network and those who wrote on company forums months before the attack noted this. Sony has been bashed in the media and by security experts as not being prepared despite threats of an attack. I recently read “Sony Chief Stringer Blindsided by Hackers Seeking Revenge” by Cliff Edwards, Michael Riley and Joseph Galante. As the title suggests, CEO Stringer is sticking by his claim that the massive hacker attack was a complete surprise.
But… oh but…
“Three years earlier, the company faced three breaches in Europe, including one in which Sony said some PlayStation Network user data might have been stolen.” Since then, evidence proves Sony did not put in a good security defense to prevent or lessen the wounds of a future attack. Another attack has happened since the April attack: the So-net Entertainment Corp. was breached, Sony websites have been down in some countries because they were targeted, and the PlayStation network is still down in some countries. The response from Stringer to the criticism of their security and response of previous attacks:
“Sony believed it had ‘good, robust security,’ Stringer said. He rejected suggestions that the company is paying for a lack of vigilance and said he was unaware of the 2008 intrusion on the PlayStation Network”
