SOE update 5/4/2011

Kruul

May 4, 2011

We want to thank you again for your patience as we work to get the SOE services back up and running. We received several questions and comments relating to the criminal attack to our network and would like to address some of the most common questions today. We are also going to continue to post updates to this website with new information as they become available.

We appreciate your continued patience and feedback.

Thank you,

 

Sony Online Entertainment

When will SOE's services be back online?

 

We have been working around the clock to restore operations as quickly as possible, and we expect to have some of our games and services up and running soon. However, we want to be very clear that we will only restore operations when we believe that the network is secure.

How is the SOE intrusion related to the PSN/Qriocity intrusion? Was this a second attack on SOE?

 

While the two systems are distinct and operated separately, given that they are both under the Sony umbrella, there is some degree of overlap in design. The attacks were similar in nature. This is NOT a second attack; new information has been discovered as part of our ongoing investigation into the criminal attack in April.

How is SOE planning to notify customers whose data may have been stolen?

 

We are sending out customer service notification emails to the email addresses we have on file for the accounts that were affected. These emails will be sent by Innovyx, our third party email distributor, and contained either 'soe.innovyx.net' or 'soe.sony.com' in the sender field.

SOE initially thought no data was extracted, what changed?

 

Essentially the perpetrators used sophisticated means not only to access the data, but also to cover their tracks. We committed to continue the investigation and in doing so, uncovered further information that we did not have when we initially believed the data was not stolen.

saxifr

blahblah blah, i trust SOE about as much as I trust Cryptic at this point

Nadia

it was recently stated that SOE network will be down until at least Friday

http://www.signonsandiego.com/news/2011/may/03/sony-data-breach-may-lead-spear-phishing-scams/

Rodriguez added that Sony Online Entertainment’s network would be shut down until Friday and possibly longer. The company has contacted the FBI to investigate the attack.

Kenze

Now see that the trouble with SOE I got 3 or 4 emails from soe.innovyx.net like 2 days ago and that looking like no SOE email Ive ever seen or heard of I didnt even open them just thought they were  phishing attempts and deleted them.

NOW 2 days later they put out a statement that oh yeah guy we're sending out official notices from this new funky email address.....

 

Now I have no idea what those emails said... why is SOE always a day late and a dollar short... 

 

one would think it a good idea to put out the notice about the new funky email addy BEFORE you sent out the emails...

Kruul

SOE initially thought no data was extracted, what changed?

Essentially the perpetrators used sophisticated means not only to access the data, but also to cover their tracks. We committed to continue the investigation and in doing so, uncovered further information that we did not have when we initially believed the data was not stolen.

 

------------------------------------------------------------------------------------------------------------------------

 

Makes one wonder if this is the same reason of the huge spike in  battle.net accounts that were hacked last year.

Nadia

Originally posted by Kenze

NOW 2 days later they put out a statement that oh yeah guy we're sending out official notices from this new funky email address.....

SOE warned about this on the same day they announced the SOE network was affected, 2 days ago, May 2

http://www.soe.com/securityupdate/

For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking.

 

Kenze

Originally posted by Nadia

Originally posted by Kenze

NOW 2 days later they put out a statement that oh yeah guy we're sending out official notices from this new funky email address.....

SOE warned about this on the same day they announced the SOE network was affected, 2 days ago, May 2

http://www.soe.com/securityupdate/

For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. Sony will not contact you in any way, including by email, asking for your credit card number, social security number or other personally identifiable information. If you are asked for this information, you can be confident Sony is not the entity asking.

 

reread todays notice from the first post those  soe.innovyx.net emails are legit but they didnt inform us of this until today

Nadia

blech -- my apologies

I agree with you

JeroKane

Nice read (well maybe not for us that are affected): http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2011/05/03/BUI41JB95L.DTL

This article pretty much sums up the state of affairs.

Also AGAIN, a nice little line about how the hackers used a "Known Security Vulnaribility" to gain access to Sony PSN and SOE's network!

Nice huh.